temp SQL injection patch

swat-sccs · Apr 29, 2024 · 3491305 · 3491305
1 parent cb7fc93
commit 3491305
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/components/pagebody.tsx b/components/pagebody.tsx
@@ -157,9 +157,11 @@ async function filterData(searchParams: { query?: string; filters?: string }) {
             })
             .join(") AND (");
     }
-
+
+    filterString.replace(/\W/g, '')
     const query = `SELECT FIRST_NAME, LAST_NAME, GRAD_YEAR, DORM, DORM_ROOM, \
-        USER_ID FROM student_data WHERE (${filterString}) `;
+        USER_ID FROM student_data WHERE (${filterString})`;
+
 
     // @ts-ignore
     const raw: any[] = await queryDb(query);