Patch 2

Author: LittleYang0531

config/database.json

@@ -2,13 +2,5 @@
     {
         "database": "sqlite",
         "sqlite.dbfile": "sonolus.db"
-    },
-    {
-        "database": "mysql",
-        "mysql.hostname": "127.0.0.1",
-        "mysql.port": 3306,
-        "mysql.username": "root",
-        "mysql.password": "root",
-        "mysql.database": "sonolus"
     }
 ]

modules/encrypt.h

@@ -208,7 +208,7 @@ bool ecdsa_sha256_verify(string msg, string sig, string pemKey) {
 
 // 引号编码
 string quote_encode(string source) {
-    return str_replace("\"", "\"\"", source);
+    return str_replace("\"", "\"\"", str_replace("\n", "\\n", source));
 }
 
 #endif

phigros

@@ -1 +1 @@
-Subproject commit c0a79a00bccf0df8da25db2c045b697288af74a2
+Subproject commit 9148670d12d6930fdaa2bd63945a1853ed9f715c

web/gui/ItemDetails.h

@@ -12,7 +12,7 @@
     quickGUICommunity(request, argv[0], argv[1], argList, detailsIcon); \
     string detailsSection = ""; \
     argvar args = item.fetchParamList(); \
-    for (auto v : args) args[v.first] = str_replace("\"", "\\\"", v.second); \
+    for (auto v : args) args[v.first] = quote_encode(v.second); \
     for (int i = 0; i < appConfig[argv[0] + ".details.sections"].size(); i++) { \
         auto section = appConfig[argv[0] + ".details.sections"][i]; \
         detailsSection += "<a style=\"height:0px;margin:0px;\" name=\"" + section["title"].asString() + "\"></a>"; \

web/sonolus/ItemCreate.h

@@ -5,6 +5,8 @@ auto SonolusCreate = [](client_conn conn, http_request request, param argv){
     auto $_POST = argvar();
     if (request.postdata[0] == '{') request.postdata = json_decode(request.postdata)["value"].asString();
 	$_POST = postParam(request);
+	for (auto v : $_POST) $_POST[v.first] = urldecode(v.second);
+	for (auto v : $_POST) $_POST[v.first] = quote_encode(v.second);
     int raws = 0;
 	int id = $_POST["id"] == "" ? -1 : atoi($_POST["id"].c_str());
     string name = $_POST["name"];

web/sonolus/ItemDetails.h

@@ -12,7 +12,7 @@
         appConfig[defineToString(name2)".enableComment"].asBool() || \
         appConfig[defineToString(name2)".enableRating"].asBool(); \
     argvar args = item.fetchParamList(); \
-    for (auto v : args) args[v.first] = str_replace("\"", "\\\"", v.second); \
+    for (auto v : args) args[v.first] = quote_encode(v.second); \
     for (int i = 0; i < appConfig[defineToString(name2)".details.sections"].size(); i++) { \
         auto obj = appConfig[defineToString(name2)".details.sections"][i]; \
         string filter = obj["filter"].asString(), \
@@ -24,7 +24,7 @@
             name2##List(filter, order, 1, appConfig[defineToString(name2)".pageSize.recommends"].asInt()) \
         ).toJsonObject()); \
     } \
-    auto recommended = name2##List("author = \"" + item.author + "\"", "id DESC", 1, 5); \
+    auto recommended = name2##List("author = \"" + quote_encode(item.author) + "\"", "id DESC", 1, 5); \
     ItemDetails["recommended"].resize(0); \
     for (int i = 0; i < recommended.size(); i++) ItemDetails["recommended"].append(recommended[i].toJsonObject()); \
 }