From 60a40f075268a64f8df549acddec1eec6491d453 Mon Sep 17 00:00:00 2001 From: ninsbl Date: Fri, 18 Oct 2024 15:31:47 +0200 Subject: [PATCH] security fix --- src/raster/r.timeseries.locations/r.timeseries.locations.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/raster/r.timeseries.locations/r.timeseries.locations.py b/src/raster/r.timeseries.locations/r.timeseries.locations.py index e4e48432..a3359819 100644 --- a/src/raster/r.timeseries.locations/r.timeseries.locations.py +++ b/src/raster/r.timeseries.locations/r.timeseries.locations.py @@ -329,8 +329,7 @@ def main(): "v.in.ogr", flags="o", # Until GDAL 3.6 is available UID and PWD have to be provided in the connection string - input=options["locations_url"] - + f";Tables={schema}.{layer};UID={os.environ.get('MSSQLSPATIAL_UID')};PWD={os.environ.get('MSSQLSPATIAL_PWD')}", + input=options["locations_url"] + f";Tables={schema}.{layer}", layer=layer if schema == "dbo" else f"{schema}.{layer}", where=where + " AND " + options["where"] if options["where"] else where, output=locations,