From 8df38da8fbd444c70996ee49c141edbcf46061f6 Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" Date: Wed, 23 Jun 2021 09:22:37 -0400 Subject: [PATCH] catch things we know are wrong, instead of requiring SELECT which allows CALL to be used --- src/modules/rlm_sql_map/rlm_sql_map.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/modules/rlm_sql_map/rlm_sql_map.c b/src/modules/rlm_sql_map/rlm_sql_map.c index 5443cf3c4f..e720c8e7aa 100644 --- a/src/modules/rlm_sql_map/rlm_sql_map.c +++ b/src/modules/rlm_sql_map/rlm_sql_map.c @@ -317,8 +317,10 @@ static int mod_bootstrap(CONF_SECTION *conf, void *instance) while (isspace((int) *p)) p++; - if (strncasecmp(p, "select", 6) != 0) { - cf_log_err_cs(conf, "'query' MUST be 'SELECT ...', not 'INSERT' or 'UPDATE'"); + if ((strncasecmp(p, "insert", 6) == 0) || + (strncasecmp(p, "update", 6) == 0) || + (strncasecmp(p, "delete", 6) == 0)) { + cf_log_err_cs(conf, "'query' MUST be 'SELECT ...', not 'INSERT', 'UPDATE', or 'DELETE'"); return -1; } -- 2.47.3