Sanitize channel id search

This commit is contained in:
softsimon 2023-07-24 13:21:06 +09:00
parent caa8cfbc0e
commit ee2d8f8c5a
No known key found for this signature in database
GPG key ID: 488D7DCFB5A430D7

View file

@ -80,7 +80,7 @@ class ChannelsApi {
public async $searchChannelsById(search: string): Promise<any[]> {
try {
const searchStripped = search.replace('%', '') + '%';
const searchStripped = search.replace(/[^0-9x]/g, '') + '%';
const query = `SELECT id, short_id, capacity, status FROM channels WHERE id LIKE ? OR short_id LIKE ? LIMIT 10`;
const [rows]: any = await DB.query(query, [searchStripped, searchStripped]);
return rows;