printf攻撃

This commit is contained in:
suti7yk5032 2024-08-23 01:48:01 +09:00
parent aae08d4701
commit 7bade8c366

View file

@ -297,7 +297,7 @@ class Bot(discord.Client):
def register(self, **kwargs):
try:
cursor = None
cursor = dislocker.db.cursor()
user_info = {
"id": str(kwargs["user_id"]),
"name": str(kwargs["name"]),
@ -322,7 +322,6 @@ class Bot(discord.Client):
else:
user_info["mouse_number"] = int(kwargs["mouse_number"])
# ユーザー登録されているかの確認
print("ここ1")
user_register = self.user_register_check(discord_user_id=user_info["id"])
if user_register["result"] == 0:
member_id = user_register["user_info"]["member_id"]
@ -332,22 +331,21 @@ class Bot(discord.Client):
if pc_check_self["result"] == 0:
# 他の人がそのPCを使っているか
pc_check = self.pc_used_check(pc_number=user_info["pc_number"])
print("ここ2")
print(pc_check)
if pc_check["result"] == 0:
# キーボードは使われているか
keyboard_check = self.keyboard_used_check(keyboard_number=user_info["keyboard_number"])
print(keyboard_check)
if keyboard_check["result"] == 0:
# マウスは使われているか
mouse_check = self.mouse_used_check(mouse_number=user_info["mouse_number"])
print("ここ3")
print(mouse_check)
if mouse_check["result"] == 0:
# パスワードとハッシュ作成
password = self.password_generate(4)
password_hash = self.hash_genarate(password)
# PC使用履歴のテーブルにレコードを挿入
cursor = dislocker.db.cursor()
cursor.execute("INSERT INTO pc_usage_history (member_id, pc_number, keyboard_number, mouse_number, start_use_time, use_detail) VALUES (%s, %s, %s, %s, clock_timestamp(), %s)", (member_id, user_info["pc_number"], user_info["keyboard_number"], user_info["mouse_number"], user_info["detail"]))
# PCリストの該当のレコードを更新
cursor.execute("UPDATE pc_list SET using_member_id = %s, password_hash = %s WHERE pc_number = %s", (member_id, password_hash, user_info["pc_number"]))