CERBERUS/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-08-28 04:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(db): use parameterized queries to prevent SQL injection in getJailNames

Browse source
This commit is contained in:
limuthu123 2026-05-31 01:37:16 +05:30
parent 557e7eecf9
commit 3282035568
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
fail2ban/server/database.py
View file

@ -443,7 +443,7 @@ class Fail2BanDb(object):
if enabled is None:
cur.execute("SELECT name FROM jails")
else:
cur.execute("SELECT name FROM jails WHERE enabled=%s" %
cur.execute("SELECT name FROM jails WHERE enabled=?",
(int(enabled),))
return set(row[0] for row in cur.fetchmany())