highperfocused/khatru
1
0
Fork 0
mirror of https://github.com/fiatjaf/khatru.git synced 2025-04-06 19:09:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

authors: [] means you won't get anything.

Browse Source
This commit is contained in:
fiatjaf 2021-02-23 09:25:24 -03:00
parent 694eccd0c8
commit 7370c1bbef
1 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
query.go
View File

@ -36,17 +36,22 @@ func queryEvents(filter *filter.EventFilter) (events []event.Event, err error) {
}
if filter.Authors != nil {
inkeys := make([]string, 0, len(filter.Authors))
for _, key := range filter.Authors {
// to prevent sql attack here we will check if
// these keys are valid 32byte hex
parsed, err := hex.DecodeString(key)
if err != nil || len(parsed) != 32 {
continue
if len(filter.Authors) == 0 {
// authors being [] means you won't get anything
return
} else {
inkeys := make([]string, 0, len(filter.Authors))
for _, key := range filter.Authors {
// to prevent sql attack here we will check if
// these keys are valid 32byte hex
parsed, err := hex.DecodeString(key)
if err != nil || len(parsed) != 32 {
continue
}
inkeys = append(inkeys, fmt.Sprintf("'%x'", parsed))
}
inkeys = append(inkeys, fmt.Sprintf("'%x'", parsed))
conditions = append(conditions, `pubkey IN (`+strings.Join(inkeys, ",")+`)`)
}
conditions = append(conditions, `pubkey IN (`+strings.Join(inkeys, ",")+`)`)
}
if filter.TagEvent != "" {