From 60ca3ec7918073a2fb3ebe81e9ea733225391d99 Mon Sep 17 00:00:00 2001
From: retoor <retoor@molodetz.nl>
Date: Sat, 8 Feb 2025 17:59:38 +0100
Subject: [PATCH] Added search form.

---
 src/snek/view/rpc.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/snek/view/rpc.py b/src/snek/view/rpc.py
index d4b2e59..2a1963a 100644
--- a/src/snek/view/rpc.py
+++ b/src/snek/view/rpc.py
@@ -113,7 +113,7 @@ class RPCView(BaseView):
             print(args,flush=True)
             query = args[0] 
             lowercase = query.lower()
-            if "drop" in lowercase or "alter" in lowercase or "update" in lowercase or "delete" in lowercase:
+            if "drop" in lowercase or "alter" in lowercase or "update" in lowercase or "delete" in lowercase or 'replace' in lowercase or 'insert' in lowercase or 'select' not in lowercase:
                 raise Exception("Not allowed")
             records = [dict(record) async for record in self.services.channel.query(args[0])]
             return records