Projects/mysql-admutils
13
0
Fork 0
Code Issues Pull Requests Activity

mysql-dbadm sanitychecks groupnames. configline updated with diff

Browse Source 
for static linking.
y
This commit is contained in:
Lasse Karstensen
2003-04-08 18:31:53 +00:00
parent 4148dda169
commit 05db606260
2 changed files with 66 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
mysql-dbadm.c
View File

@@ -1,5 +1,5 @@
/*
* @(#) $Header: /tmp/cvs/mysql-admutils/mysql-dbadm.c,v 1.10 2003-04-07 16:21:36 lkarsten Exp $
* @(#) $Header: /tmp/cvs/mysql-admutils/mysql-dbadm.c,v 1.11 2003-04-08 18:31:53 lkarsten Exp $
*
* mysql-dbadm.c
*
@@ -123,7 +123,10 @@ list(MYSQL *pmysql)
char **dblist;
int i, counter;
struct passwd *p;
char *escaped_user;
// variabler som brukes til <20> escape gruppenavnet til mysqlvennlig format.
char escaped_user[64];
char *cp_kopi;
p = getpwuid(getuid());
if (!p)
@@ -139,48 +142,30 @@ list(MYSQL *pmysql)
usr_groups = get_group_names(&numgroups);
cp = usr_groups;
while (*cp) {
// ettersom _ og % er wildcards i sql, m<> vi escape
// eventuelle slike i gruppenavnet. "kall_s" f.eks, b<>r
// bli til "kall\_s" f<>r det g<>r til databasen.
int i, j;
char* user_start;
char* cp_kopi;
cp_kopi = *cp;
escaped_user = (char*)malloc(64 * sizeof(char));
user_start = escaped_user;
while (*cp) { // itererer over alle grupper en person er med i
if (*cp == NULL)
break;
#ifdef DEBUG
printf("cp er %s\n", *cp);
#endif
for(i=j=0; i<strlen(*cp); i++){
escaped_user[0] = '\0';
cp_kopi=*cp;
printf("%c.\n", *cp[i]);
// unntak, typisk _ eller %
if ((*cp[i] == '_') || (*cp[i] == '%')) {
char foo;
foo = (char)'\\';
escaped_user[j] = foo;
j++;
printf("%c.....\n", escaped_user);
}
// vanlig kopiering
escaped_user[j] = cp[i];
//strncpy(&escaped_user[j], &*cp[i], 1);
j++;
} // while
printf("escaped_user er %s\n", escaped_user);
wild = malloc(strlen(user_start)+3);
sprintf(wild, "%s\\_%%", user_start);
// itererer over bokstavene i gruppenavn, og escaper spesialtegn.
for(i=0; i<=strlen(cp_kopi); i++) {
// hvis % _ , s<> skriv \ og s<> tegn
if ((cp_kopi[i] == '_') || (cp_kopi[i] == '%')) {
strcat(escaped_user, "\\");
}
escaped_user[strlen(escaped_user) + 1] = '\0';
escaped_user[strlen(escaped_user)] = cp_kopi[i];
} // for
wild = malloc(strlen(escaped_user)+3);
sprintf(wild, "%s\\_%%", escaped_user);
#ifdef DEBUG
printf("dbadm: wildcard: '%s'\n", wild);
@@ -202,7 +187,6 @@ list(MYSQL *pmysql)
free(wild);
free(escaped_user);
cp++;
}
@@ -303,7 +287,8 @@ editperm(MYSQL *pmysql, const char *db)
int lines; /* number of grant lines processed */
int i; /* iterate through lines[] */
mktemp(fn);
mkstemp(fn);
if (strcmp(fn, "") == 0)
return dberror(NULL, "Cannot create a unique temporary file name.");
@@ -434,6 +419,13 @@ main(int argc, char *argv[])
if (argc < 2)
return wrong_use(NULL);
#ifdef DEBUG
printf("NB NB NB: denne versjonen av programmet er kompilert med -DDEBUG, og\n");
printf("kan komme til <20> skrive ut ekstra informasjon. Dette er ikke farlig,\n");
printf("og programmet b<>r virke som vanlig.\n");
#endif
/* check that the supplied command is valid */
if (strcmp(argv[1], "create") == 0)