diff --git a/pandora_console/extensions/system_info.php b/pandora_console/extensions/system_info.php index a6248a54d3..fd9a233371 100644 --- a/pandora_console/extensions/system_info.php +++ b/pandora_console/extensions/system_info.php @@ -86,13 +86,13 @@ function getPandoraDiagnostic(&$systemInfo) { $systemInfo['current_update'] = db_get_sql("SELECT value FROM tupdate_settings WHERE \"key\" = 'current_update'"); break; case "oracle": - $systemInfo['db_scheme_version'] = db_get_sql("SELECT value FROM tconfig WHERE token = 'db_scheme_version'"); - $systemInfo['db_scheme_build'] = db_get_sql("SELECT value FROM tconfig WHERE token = 'db_scheme_build'"); - $systemInfo['enterprise_installed'] = db_get_sql("SELECT value FROM tconfig WHERE token = 'enterprise_installed'"); - $systemInfo['db_maintance'] = db_get_sql ("SELECT value FROM tconfig WHERE token = 'db_maintance'"); - $systemInfo['customer_key'] = db_get_sql("SELECT value FROM tupdate_settings WHERE key = 'customer_key';"); - $systemInfo['updating_code_path'] = db_get_sql("SELECT value FROM tupdate_settings WHERE key = 'updating_code_path'"); - $systemInfo['current_update'] = db_get_sql("SELECT value FROM tupdate_settings WHERE key = 'current_update'"); + $systemInfo['db_scheme_version'] = db_get_sql("SELECT \"value\" FROM tconfig WHERE \"token\" = 'db_scheme_version'"); + $systemInfo['db_scheme_build'] = db_get_sql("SELECT \"value\" FROM tconfig WHERE \"token\" = 'db_scheme_build'"); + $systemInfo['enterprise_installed'] = db_get_sql("SELECT \"value\" FROM tconfig WHERE \"token\" = 'enterprise_installed'"); + $systemInfo['db_maintance'] = db_get_sql ("SELECT \"value\" FROM tconfig WHERE \"token\" = 'db_maintance'"); + $systemInfo['customer_key'] = db_get_sql("SELECT \"value\" FROM tupdate_settings WHERE \"key =\" 'customer_key';"); + $systemInfo['updating_code_path'] = db_get_sql("SELECT \"value\" FROM tupdate_settings WHERE \"key =\" 'updating_code_path'"); + $systemInfo['current_update'] = db_get_sql("SELECT \"value\" FROM tupdate_settings WHERE \"key =\" 'current_update'"); break; } } diff --git a/pandora_console/godmode/setup/license.php b/pandora_console/godmode/setup/license.php index 70375aa7e9..85078f3741 100644 --- a/pandora_console/godmode/setup/license.php +++ b/pandora_console/godmode/setup/license.php @@ -30,7 +30,7 @@ if ($update_settings) { foreach ($_POST['keys'] as $key => $value) { db_process_sql_update( 'tupdate_settings', - array('value' => $value), + array(db_escape_key_identifier('value') => $value), array(db_escape_key_identifier('key') => $key)); } diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php index a07b3f62f6..c591e05267 100644 --- a/pandora_console/include/functions_config.php +++ b/pandora_console/include/functions_config.php @@ -178,7 +178,7 @@ function config_update_config () { if ($update_manager_installed == 1) { $license_info_key = get_parameter('license_info_key', ''); if (!empty($license_info_key)) { - $values = array("value" => $license_info_key); + $values = array(db_escape_key_identifier('value') => $license_info_key); $where = array(db_escape_key_identifier('key') => 'customer_key'); $update_manage_settings_result = db_process_sql_update('tupdate_settings', $values, $where); if ($update_manage_settings_result === false) diff --git a/pandora_console/include/functions_update_manager.php b/pandora_console/include/functions_update_manager.php index 4b579f9fa7..11f9c14acf 100755 --- a/pandora_console/include/functions_update_manager.php +++ b/pandora_console/include/functions_update_manager.php @@ -25,7 +25,7 @@ function update_manager_get_config_values() { global $pandora_version; $license = db_get_value( - 'value', + db_escape_key_identifier('value'), 'tupdate_settings', db_escape_key_identifier('key'), 'customer_key'); @@ -480,7 +480,7 @@ function update_manager_set_current_package($current_package) { $token = 'current_package'; } - $col_value = 'value'; + $col_value = db_escape_key_identifier('value'); $col_key = db_escape_key_identifier('key'); $value = db_get_value($col_value, @@ -507,7 +507,7 @@ function update_manager_get_current_package() { $token = 'current_package'; } $current_update = db_get_value( - 'value', + db_escape_key_identifier('value'), 'tupdate_settings', db_escape_key_identifier('key'), $token);