diff --git a/src/snek/view/rpc.py b/src/snek/view/rpc.py index d4b2e59..2a1963a 100644 --- a/src/snek/view/rpc.py +++ b/src/snek/view/rpc.py @@ -113,7 +113,7 @@ class RPCView(BaseView): print(args,flush=True) query = args[0] lowercase = query.lower() - if "drop" in lowercase or "alter" in lowercase or "update" in lowercase or "delete" in lowercase: + if "drop" in lowercase or "alter" in lowercase or "update" in lowercase or "delete" in lowercase or 'replace' in lowercase or 'insert' in lowercase or 'select' not in lowercase: raise Exception("Not allowed") records = [dict(record) async for record in self.services.channel.query(args[0])] return records