fix query check with single line SELECT. fixes #3

splitbrain · splitbrain · commit d7913160b455 · 2025-01-07T09:11:28.000+01:00
diff --git a/helper.php b/helper.php
@@ -69,7 +69,7 @@ public function getPDO($dsn = null, $user = null, $pass = null)
      */
     public function executeQuery($query, $dsnalias = null)
     {
-        if (!preg_match('/^select /i', trim($query))) {
+        if (!preg_match('/^select(\s|$)/i', trim($query))) {
             throw new \Exception('For security reasons only SELECT statements are allowed in dbquery');
         }
 

Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,7 @@ public function getPDO($dsn = null, $user = null, $pass = null)`
`69`	`69`	`*/`
`70`	`70`	`public function executeQuery($query, $dsnalias = null)`
`71`	`71`	`{`
`72`		`- if (!preg_match('/^select /i', trim($query))) {`
	`72`	`+ if (!preg_match('/^select(\s\|$)/i', trim($query))) {`
`73`	`73`	`throw new \Exception('For security reasons only SELECT statements are allowed in dbquery');`
`74`	`74`	`}`
`75`	`75`