10
10
from django .http import HttpResponseBadRequest
11
11
from django .shortcuts import render_to_response
12
12
from django .utils import simplejson
13
- from django .utils .hashcompat import sha_constructor
14
13
15
14
from debug_toolbar .utils .compat .db import connections
16
15
16
+ try :
17
+ from hashlib import sha1
18
+ except ImportError :
19
+ from django .utils .hashcompat import sha_constructor as sha1
20
+
17
21
18
22
class InvalidSQLError (Exception ):
19
23
def __init__ (self , value ):
@@ -37,7 +41,7 @@ def sql_select(request):
37
41
sql = request .GET .get ('sql' , '' )
38
42
params = request .GET .get ('params' , '' )
39
43
alias = request .GET .get ('alias' , 'default' )
40
- hash = sha_constructor (settings .SECRET_KEY + sql + params ).hexdigest ()
44
+ hash = sha1 (settings .SECRET_KEY + sql + params ).hexdigest ()
41
45
if hash != request .GET .get ('hash' , '' ):
42
46
return HttpResponseBadRequest ('Tamper alert' ) # SQL Tampering alert
43
47
if sql .lower ().strip ().startswith ('select' ):
@@ -72,7 +76,7 @@ def sql_explain(request):
72
76
sql = request .GET .get ('sql' , '' )
73
77
params = request .GET .get ('params' , '' )
74
78
alias = request .GET .get ('alias' , 'default' )
75
- hash = sha_constructor (settings .SECRET_KEY + sql + params ).hexdigest ()
79
+ hash = sha1 (settings .SECRET_KEY + sql + params ).hexdigest ()
76
80
if hash != request .GET .get ('hash' , '' ):
77
81
return HttpResponseBadRequest ('Tamper alert' ) # SQL Tampering alert
78
82
if sql .lower ().strip ().startswith ('select' ):
@@ -118,7 +122,7 @@ def sql_profile(request):
118
122
sql = request .GET .get ('sql' , '' )
119
123
params = request .GET .get ('params' , '' )
120
124
alias = request .GET .get ('alias' , 'default' )
121
- hash = sha_constructor (settings .SECRET_KEY + sql + params ).hexdigest ()
125
+ hash = sha1 (settings .SECRET_KEY + sql + params ).hexdigest ()
122
126
if hash != request .GET .get ('hash' , '' ):
123
127
return HttpResponseBadRequest ('Tamper alert' ) # SQL Tampering alert
124
128
if sql .lower ().strip ().startswith ('select' ):
0 commit comments