From f65aa6024f938abc25de176713d9cd005367fe68 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sat, 10 Jul 2021 09:42:20 +0200 Subject: [PATCH] Add replace into forbidden sql in read-only mode --- htdocs/core/db/mysqli.class.php | 2 +- htdocs/core/db/pgsql.class.php | 2 +- htdocs/core/db/sqlite3.class.php | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/htdocs/core/db/mysqli.class.php b/htdocs/core/db/mysqli.class.php index 541b1728753..36974d29218 100644 --- a/htdocs/core/db/mysqli.class.php +++ b/htdocs/core/db/mysqli.class.php @@ -279,7 +279,7 @@ class DoliDBMysqli extends DoliDB } if (!empty($dolibarr_main_db_readonly)) { - if (preg_match('/^(INSERT|UPDATE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { + if (preg_match('/^(INSERT|UPDATE|REPLACE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { $this->lasterror = 'Application in read-only mode'; $this->lasterrno = 'APPREADONLY'; $this->lastquery = $query; diff --git a/htdocs/core/db/pgsql.class.php b/htdocs/core/db/pgsql.class.php index 866ae2edc88..0513226ac31 100644 --- a/htdocs/core/db/pgsql.class.php +++ b/htdocs/core/db/pgsql.class.php @@ -532,7 +532,7 @@ class DoliDBPgsql extends DoliDB } if (!empty($dolibarr_main_db_readonly)) { - if (preg_match('/^(INSERT|UPDATE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { + if (preg_match('/^(INSERT|UPDATE|REPLACE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { $this->lasterror = 'Application in read-only mode'; $this->lasterrno = 'APPREADONLY'; $this->lastquery = $query; diff --git a/htdocs/core/db/sqlite3.class.php b/htdocs/core/db/sqlite3.class.php index 9315320bf79..395155973be 100644 --- a/htdocs/core/db/sqlite3.class.php +++ b/htdocs/core/db/sqlite3.class.php @@ -456,7 +456,7 @@ class DoliDBSqlite3 extends DoliDB } if (!empty($dolibarr_main_db_readonly)) { - if (preg_match('/^(INSERT|UPDATE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { + if (preg_match('/^(INSERT|UPDATE|REPLACE|DELETE|CREATE|ALTER|TRUNCATE|DROP)/i', $query)) { $this->lasterror = 'Application in read-only mode'; $this->lasterrno = 'APPREADONLY'; $this->lastquery = $query;