X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fhttp%2Fpages%2Fexecquerypage.cpp;h=358f34ab4f52421cd58290b1cbb0b158e68573c4;hb=fcb124f8d6d3f5678e82049fb8e5e23c8cfaec6d;hp=f86579a45f62a19c3ef4582f45ab4bd4a33e4572;hpb=52c0819bfc1d083c6e0738f75f0d7eeba521295a;p=fms.git

diff --git a/src/http/pages/execquerypage.cpp b/src/http/pages/execquerypage.cpp
index f86579a..358f34a 100644
--- a/src/http/pages/execquerypage.cpp
+++ b/src/http/pages/execquerypage.cpp
@@ -8,12 +8,28 @@
 const std::string ExecQueryPage::GeneratePage(const std::string &method, const std::map<std::string,std::string> &queryvars)
 {
 	std::string content="";
+	std::string query="";
 
-	if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="execute" && queryvars.find("query")!=queryvars.end() && (*queryvars.find("query")).second!="")
+	if(queryvars.find("formaction")!=queryvars.end() && (*queryvars.find("formaction")).second=="execute" && queryvars.find("query")!=queryvars.end() && (*queryvars.find("query")).second!="" && ValidateFormPassword(queryvars))
 	{
-		SQLite3DB::Recordset rs=m_db->Query((*queryvars.find("query")).second);
+		query=(*queryvars.find("query")).second;
+		SQLite3DB::Recordset rs=m_db->Query(query);
 
 		content+="<table>";
+		if(rs.Count()>0)
+		{
+			content+="<tr>";
+			for(int i=0; i<rs.Cols(); i++)
+			{
+				content+="<th>";
+				if(rs.GetColumnName(i))
+				{
+					content+=rs.GetColumnName(i);
+				}
+				content+="</th>";
+			}
+			content+="<tr>";
+		}
 		while(!rs.AtEnd())
 		{
 			content+="<tr>";
@@ -34,12 +50,13 @@ const std::string ExecQueryPage::GeneratePage(const std::string &method, const s
 
 	content+="<h2>Execute Query</h2>";
 	content+="<form name=\"frmquery\" method=\"POST\">";
+	content+=CreateFormPassword();
 	content+="<input type=\"hidden\" name=\"formaction\" value=\"execute\">";
-	content+="<textarea name=\"query\" rows=\"10\" cols=\"80\"></textarea>";
+	content+="<textarea name=\"query\" rows=\"10\" cols=\"80\">"+StringFunctions::Replace(query,"<","&lt;")+"</textarea>";
 	content+="<input type=\"submit\" value=\"Execute Query\">";
 	content+="</form>";
 
-	return "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\n\r\n"+StringFunctions::Replace(m_template,"[CONTENT]",content);
+	return StringFunctions::Replace(m_template,"[CONTENT]",content);
 }
 
 const bool ExecQueryPage::WillHandleURI(const std::string &uri)