lapuda
82d3264c72
- Introduced `inspect-shz-logs` skill for inspecting local and production logs with bounded read-only commands. - Added `view.sh` script for log viewing with options for following logs and filtering by keywords. - Created `query-shz-highgo` skill for querying the SHZ HighGo database through an SSH gateway. - Implemented read-only SQL execution with strict controls on allowed statements and query structure. - Added new domain and mapper classes for managing outdoor fair job associations. - Enhanced `OutdoorFairController` to support job listing and management for outdoor fairs. - Created SQL scripts for initializing outdoor fair job data and managing menu visibility.
44 lines
1.4 KiB
Bash
Executable File
44 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
skill_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
password_file="${HIGHGO_PASSWORD_FILE:-$skill_dir/.password}"
|
|
|
|
ssh_host="root@124.243.245.42"
|
|
psql_path="/opt/HighGo4.5.7-see/bin/psql"
|
|
db_host="39.98.44.136"
|
|
db_port="6023"
|
|
db_name="highgo"
|
|
db_user="sysdba"
|
|
|
|
if [[ ! -r "$password_file" ]]; then
|
|
echo "HighGo password file is missing or unreadable: $password_file" >&2
|
|
exit 2
|
|
fi
|
|
|
|
if [[ $# -eq 0 ]]; then
|
|
echo "Usage: $0 'SELECT ...'" >&2
|
|
exit 2
|
|
fi
|
|
|
|
sql="$*"
|
|
if [[ ! "$sql" =~ ^[[:space:]]*(SELECT|select|WITH|with|SHOW|show|EXPLAIN|explain)([[:space:]]|$) ]]; then
|
|
echo "Rejected: only SELECT, WITH, SHOW, and EXPLAIN queries are allowed." >&2
|
|
exit 3
|
|
fi
|
|
|
|
sql_without_final_semicolon="${sql%;}"
|
|
if [[ "$sql_without_final_semicolon" == *';'* ]]; then
|
|
echo "Rejected: multiple SQL statements are not allowed." >&2
|
|
exit 3
|
|
fi
|
|
|
|
password="$(<"$password_file")"
|
|
sql_base64="$(printf '%s' "$sql" | base64 | tr -d '\n')"
|
|
|
|
{
|
|
printf '%s\n' "$password"
|
|
printf '%s\n' "$sql_base64"
|
|
} | ssh -o BatchMode=yes -o ConnectTimeout=10 "$ssh_host" \
|
|
"read -r PGPASSWORD; read -r SQL_BASE64; export PGPASSWORD; export PGOPTIONS='-c default_transaction_read_only=on -c search_path=shz,public -c statement_timeout=30000'; SQL=\$(printf '%s' \"\$SQL_BASE64\" | base64 -d); exec '$psql_path' -X --no-psqlrc -h '$db_host' -p '$db_port' -U '$db_user' -d '$db_name' -v ON_ERROR_STOP=1 -P pager=off -c \"\$SQL\""
|