Py-KMS-Organization/py-kms
1
0
Fork 0
mirror of https://github.com/Py-KMS-Organization/py-kms.git synced 2026-01-24 00:50:16 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Prevent unknown column names from being passed to DB

Browse source 
Signed-off-by: simonmicro <simon@simonmicro.de>
This commit is contained in:
simonmicro 2025-12-06 21:18:52 +01:00
parent 49fb60fe6b
commit 6c57a8e5b4
No known key found for this signature in database
GPG key ID: 033A4D4CE4E063D6
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
py-kms/pykms_Sql.py
View file

@ -109,8 +109,9 @@ def sql_update(dbName, infoDict):
# Update only changed columns
common_postfix = "WHERE clientMachineId=:clientMachineId AND applicationId=:applicationId"
def update_column_if_changed(column_name, new_value):
assert column_name in _column_name_to_index, f"Unknown column name: {column_name}"
assert "clientMachineId" in infoDict and "applicationId" in infoDict, "infoDict must contain 'clientMachineId' and 'applicationId'"
if column_name not in _column_name_to_index:
raise ValueError(f"Unknown column name: {column_name}")
if data[_column_name_to_index[column_name]] != new_value:
query = f"UPDATE clients SET {column_name}=:value {common_postfix}"
cur.execute(query, {"value": new_value, "clientMachineId": infoDict['clientMachineId'], "applicationId": infoDict['applicationId']})