cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

strip out any control characters before writing to the db

Browse source
This commit is contained in:
Richard Fairhurst 2007-07-13 09:46:39 +00:00
parent 84b67e00a0
commit fa1397e988
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/controllers/amf_controller.rb
View file

@ -288,6 +288,7 @@ EOF
ymin=[ys,ymin].min; ymax=[ys,ymax].max ymin=[ys,ymin].min; ymax=[ys,ymax].max
node=points[i][2].to_i node=points[i][2].to_i
tagstr=array2tag(points[i][4]) tagstr=array2tag(points[i][4])
tagstr=tagstr.gsub(/[\000-\037]/,"")
tagsql="'"+sqlescape(tagstr)+"'" tagsql="'"+sqlescape(tagstr)+"'"
# compare node # compare node
@ -404,6 +405,8 @@ EOF
if v[0,6]=='(type ' then next end if v[0,6]=='(type ' then next end
if insertsql !='' then insertsql +=',' end if insertsql !='' then insertsql +=',' end
if currentsql!='' then currentsql+=',' end if currentsql!='' then currentsql+=',' end
k=k.gsub(/[\000-\037]/,"")
v=v.gsub(/[\000-\037]/,"")
insertsql +="(#{way},'"+sqlescape(k)+"','"+sqlescape(v)+"',#{version})" insertsql +="(#{way},'"+sqlescape(k)+"','"+sqlescape(v)+"',#{version})"
currentsql+="(#{way},'"+sqlescape(k)+"','"+sqlescape(v)+"')" currentsql+="(#{way},'"+sqlescape(k)+"','"+sqlescape(v)+"')"
end end