s4
changeset 298:ec267a1d27ee
Do not "wasureta" for nonexistent user
author | HIROSE Yuuji <yuuji@gentei.org> |
---|---|
date | Thu, 29 Sep 2016 14:47:29 +0859 |
parents | 8933d3701c00 |
children | b38514180d13 |
files | s4-funcs.sh |
diffstat | 1 files changed, 12 insertions(+), 1 deletions(-) [+] |
line diff
1.1 --- a/s4-funcs.sh Sat Sep 24 13:56:15 2016 +0859 1.2 +++ b/s4-funcs.sh Thu Sep 29 14:47:29 2016 +0859 1.3 @@ -553,6 +553,13 @@ 1.4 fi ;; 1.5 esac) 1.6 } 1.7 +sqlquotestr() ( 1.8 + case "$1" in 1.9 + *\'*) v=`echo "$1"| sed "s/'/''/g"` 1.10 + echo "'$v'" ;; 1.11 + *) echo "'$1'" ;; 1.12 + esac 1.13 +) 1.14 mktempd() { 1.15 TMPDIR=$tmpd mktemp -d -t $session 1.16 } 1.17 @@ -1053,7 +1060,11 @@ 1.18 fi 1.19 fi 1.20 pswd=`getpar pswd` 1.21 - if [ x"$pswd" = x"wasureta" ]; then 1.22 + quser=`sqlquotestr "$user"` 1.23 + dbuser=`query "SELECT name FROM user WHERE name=$quser;"` 1.24 + if [ -z "$dbuser" ]; then 1.25 + return 3 1.26 + elif [ x"$pswd" = x"wasureta" ]; then 1.27 wasureta $user 1.28 return 1 # wasureta error 1.29 fi