From 8f276af5e7487178a4d3ba21e1dfbb2efd4d4619 Mon Sep 17 00:00:00 2001 From: Julian Rother <julianr@fsmpi.rwth-aachen.de> Date: Mon, 23 Jul 2018 02:38:02 +0200 Subject: [PATCH] Escaped "key" (reserved keyword in mysql) --- livestreams.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/livestreams.py b/livestreams.py index 6cd2659..81864ba 100644 --- a/livestreams.py +++ b/livestreams.py @@ -93,7 +93,7 @@ def gentoken(): @app.route('/internal/streaming/rekey/<int:id>') @mod_required def streamrekey(id): - modify('UPDATE live_sources SET key = ? WHERE id = ? AND NOT deleted', gentoken(), id) + modify('UPDATE live_sources SET `key` = ? WHERE id = ? AND NOT deleted', gentoken(), id) source = query('SELECT * FROM live_sources WHERE NOT deleted AND id = ?', id)[0] flash('Der Streamkey von <strong>'+source['name']+'</strong> wurde neu generiert: <span><input readonly type="text" style="width: 15em" value="'+source['key']+'"></span>') return redirect(url_for('streaming')) @@ -122,7 +122,7 @@ def streamauth(server): if not internal: return 'Forbidden', 403 if request.values['call'] == 'publish': - sources = query('SELECT * FROM live_sources WHERE NOT deleted AND key = ?', request.values['name']) + sources = query('SELECT * FROM live_sources WHERE NOT deleted AND `key` = ?', request.values['name']) if not sources: return 'Not found', 404 modify('UPDATE live_sources SET server = ?, clientid = ?, last_active = ?, preview_key = ? WHERE id = ?', server, request.values['clientid'], datetime.now(), gentoken(), sources[0]['id']) -- GitLab