github-such-software/wownerogue
1
0
Fork 0
mirror of https://github.com/Such-Software/wownerogue.git synced 2026-10-17 22:31:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix db query

Browse Source
This commit is contained in:
jwinterm
2026-02-18 20:59:28 -05:00
parent 727304996a
commit b6597a4a6e
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/db/databaseManager.js
+4 -1
View File
@@ -20,7 +20,10 @@ class QueryValidator {
isSafe(text, params) {
// Check if using parameterized query properly
const placeholderCount = (text.match(/\$\d+/g) || []).length;
// Count unique placeholders ($1, $2, etc.) — PostgreSQL allows reusing $1 multiple times
const placeholders = text.match(/\$\d+/g) || [];
const uniquePlaceholders = new Set(placeholders);
const placeholderCount = uniquePlaceholders.size;
if (placeholderCount !== params.length) {
console.warn('⚠️ Parameter count mismatch in query');
return false;