85d879803c88aa036934d36977a10b5d28b70aaa,debug_toolbar/views.py,,sql_explain,#,21

Before Change

    from debug_toolbar.panels.sql import reformat_sql
    sql = request.GET.get("sql", "")
    if sql.lower().startswith("select"):
        params = simplejson.loads(request.GET.get("params", ""))
        cursor = connection.cursor()
        cursor.execute("EXPLAIN %s" % (sql,), params)
        headers = [d[0] for d in cursor.description]
        result = cursor.fetchall()

After Change

    sql = request.GET.get("sql", "")
    params = request.GET.get("params", "")
    hash = sha_constructor(settings.SECRET_KEY + sql + params).hexdigest()
    if hash != request.GET.get("hash", ""):
        return HttpResponse("<h3>Tamper alert</h3>") // SQL Tampering alert
    if sql.lower().startswith("select"):
        params = simplejson.loads(params)
        cursor = connection.cursor()
        cursor.execute("EXPLAIN %s" % (sql,), params)

Instances