summaryrefslogtreecommitdiffstats
path: root/tupkg/update/tupkgupdate
diff options
context:
space:
mode:
authorsimo <simo>2006-11-23 19:24:08 +0000
committersimo <simo>2006-11-23 19:24:08 +0000
commit89d6607684a1d28575767a12419b6f652794fc30 (patch)
tree11a3a1ba498cdb9db6ef18e84b7300f21506836d /tupkg/update/tupkgupdate
parenta103c7b14c2e3b75059d2d813ed1da510f3e3de0 (diff)
downloadaurweb-89d6607684a1d28575767a12419b6f652794fc30.tar.xz
sql wansn't escaped on inserting package sources
Diffstat (limited to 'tupkg/update/tupkgupdate')
-rwxr-xr-xtupkg/update/tupkgupdate2
1 files changed, 1 insertions, 1 deletions
diff --git a/tupkg/update/tupkgupdate b/tupkg/update/tupkgupdate
index 320ccbe..d44a7a3 100755
--- a/tupkg/update/tupkgupdate
+++ b/tupkg/update/tupkgupdate
@@ -162,7 +162,7 @@ class PackageDatabase:
# PackageSources
for source in package.sources:
q.execute("INSERT INTO PackageSources (PackageID, Source) " +
- "VALUES (" + str(id) + ", '" + source + "')")
+ "VALUES (" + str(id) + ", '" + MySQLdb.escape_string(source) + "')")
# PackageDepends
for dep in package.depends:
depid = self.lookupOrDummy(dep)