From 9a2c33736aeee1016e45ef655d8c58690555152c Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Fri, 25 Jan 2013 23:56:55 +1100
Subject: New debug page: ?/debug/sql

---
 templates/mod/debug/sql.html | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 templates/mod/debug/sql.html

(limited to 'templates/mod/debug/sql.html')

diff --git a/templates/mod/debug/sql.html b/templates/mod/debug/sql.html
new file mode 100644
index 00000000..63ba22f8
--- /dev/null
+++ b/templates/mod/debug/sql.html
@@ -0,0 +1,26 @@
+<form action="" method="post">
+	<input type="hidden" name="token" value="{{ security_token }}">
+	<textarea style="display:block;margin:5px auto;width:90%;max-width:600px" rows="3" name="query">{{ query | e }}</textarea>
+	<input style="display:block;margin:5px auto" type="submit" value="Query">
+</form>
+
+{% if result == 'empty' %}
+	<p style="text-align:center">Query successful (no result).</p>
+{% elseif result %}
+	<table class="modlog">
+		<tr>
+			{% for key in keys %}
+				<th>{{ key }}</th>
+			{% endfor %}
+		</tr>
+		{% for row in result %}
+			<tr>
+				{% for col in row %}
+					<td>{{ col }}</td>
+				{% endfor %}
+			</tr>
+		{% endfor %}
+	</table>
+{% elseif error %}
+	<p style="text-align:center;color:#d00">{{ error }}</p>
+{% endif %}
-- 
cgit v1.3


From db1b50cfc3a7f3b45891b0ff69db4892b0e6929e Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Sat, 26 Jan 2013 00:00:39 +1100
Subject: Escape result in ?/debug/sql

---
 templates/mod/debug/sql.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'templates/mod/debug/sql.html')

diff --git a/templates/mod/debug/sql.html b/templates/mod/debug/sql.html
index 63ba22f8..755995f9 100644
--- a/templates/mod/debug/sql.html
+++ b/templates/mod/debug/sql.html
@@ -10,17 +10,17 @@
 	<table class="modlog">
 		<tr>
 			{% for key in keys %}
-				<th>{{ key }}</th>
+				<th>{{ key | e }}</th>
 			{% endfor %}
 		</tr>
 		{% for row in result %}
 			<tr>
 				{% for col in row %}
-					<td>{{ col }}</td>
+					<td>{{ col | e }}</td>
 				{% endfor %}
 			</tr>
 		{% endfor %}
 	</table>
 {% elseif error %}
-	<p style="text-align:center;color:#d00">{{ error }}</p>
+	<p style="text-align:center;color:#d00">{{ error | e }}</p>
 {% endif %}
-- 
cgit v1.3