From 34ead0aec233293148602d2ab4a63096aa61af47 Mon Sep 17 00:00:00 2001 From: HelloZeroNet Date: Mon, 25 Apr 2016 02:25:54 +0200 Subject: [PATCH] Allow whitespace prefix for sql queries --- src/Ui/UiWebsocket.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Ui/UiWebsocket.py b/src/Ui/UiWebsocket.py index 1c5accac..6a448bb7 100644 --- a/src/Ui/UiWebsocket.py +++ b/src/Ui/UiWebsocket.py @@ -437,7 +437,7 @@ class UiWebsocket(object): def actionDbQuery(self, to, query, params=None, wait_for=None): rows = [] try: - assert query.upper().startswith("SELECT"), "Only SELECT query supported" + assert query.strip().upper().startswith("SELECT"), "Only SELECT query supported" res = self.site.storage.query(query, params) except Exception, err: # Response the error to client return self.response(to, {"error": str(err)})