escape
This commit is contained in:
@@ -141,9 +141,9 @@ in {
|
|||||||
PSQL="${pkgs.postgresql}/bin/psql -U postgres"
|
PSQL="${pkgs.postgresql}/bin/psql -U postgres"
|
||||||
TOKEN_STRING="$HOMEPAGE_VAR_GITEA_API"
|
TOKEN_STRING="$HOMEPAGE_VAR_GITEA_API"
|
||||||
SALT=$(${pkgs.coreutils}/bin/cat /dev/urandom | ${pkgs.gnugrep}/bin/tr -dc 'a-zA-Z0-9' | ${pkgs.coreutils}/bin/head -c 10)
|
SALT=$(${pkgs.coreutils}/bin/cat /dev/urandom | ${pkgs.gnugrep}/bin/tr -dc 'a-zA-Z0-9' | ${pkgs.coreutils}/bin/head -c 10)
|
||||||
COMBINED_STRING="${SALT}${TOKEN_STRING}"
|
COMBINED_STRING="\${SALT}\${TOKEN_STRING}"
|
||||||
HASH=$(echo -n "$COMBINED_STRING" | ${pkgs.openssl}/bin/openssl dgst -sha256 | ${pkgs.coreutils}/bin/cut -d' ' -f2)
|
HASH=$(echo -n "$COMBINED_STRING" | ${pkgs.openssl}/bin/openssl dgst -sha256 | ${pkgs.coreutils}/bin/cut -d' ' -f2)
|
||||||
LAST_8="${TOKEN_STRING: -8}"
|
LAST_8="\${TOKEN_STRING: -8}"
|
||||||
NOW=$(${pkgs.coreutils}/bin/date +%s)
|
NOW=$(${pkgs.coreutils}/bin/date +%s)
|
||||||
$PSQL -d "gitea_db" -e \
|
$PSQL -d "gitea_db" -e \
|
||||||
"INSERT INTO access_token (uid, name, token_hash, token_salt, token_last_eight, created_unix, updated_unix) \
|
"INSERT INTO access_token (uid, name, token_hash, token_salt, token_last_eight, created_unix, updated_unix) \
|
||||||
|
|||||||
Reference in New Issue
Block a user