tdmalone / working-plusplus

Like plusplus.chat, but one that actually works, because you can host it yourself 😉
MIT License
23 stars 41 forks source link

Eliminate potential SQL injection from database queries #30

Open Alex-Vol-SV opened 4 years ago

Alex-Vol-SV commented 4 years ago

The TODO markers indicating the possibility of SQL injection issues were used to guide this implementation. Fixed by applying parameterized queries.

Found a unitest issue that was masked by the use of concatenation in SQL and fixed the unit tests to match the runtime code execution.

coveralls commented 4 years ago

Pull Request Test Coverage Report for Build 128


Totals Coverage Status
Change from base Build 89: 0.3%
Covered Lines: 258
Relevant Lines: 333

💛 - Coveralls