diff options
| author | LV-426 <lv-426@taproot.org.il> | 2014-09-28 18:34:40 +0300 |
|---|---|---|
| committer | LV-426 <lv-426@taproot.org.il> | 2014-09-28 18:34:40 +0300 |
| commit | 56f72b17743b5f065be241202214b5578971e8da (patch) | |
| tree | f4c8567db8be548f32f507dbb79c53c3d646afb5 /src-py | |
| parent | 78149303d695475be310acf245323c058e84ca6d (diff) | |
__sanitize_input stub
Diffstat (limited to 'src-py')
| -rw-r--r-- | src-py/rhizi_api.py | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/src-py/rhizi_api.py b/src-py/rhizi_api.py index 7fb988e7..3bd11ea4 100644 --- a/src-py/rhizi_api.py +++ b/src-py/rhizi_api.py @@ -15,6 +15,9 @@ webapp.debug = True # injected: DB controller db_ctl = None +def __sanitize_input(): + pass + def __response_wrap(data=None, error=None): """ wrap response data/errors as dict - this should always be used when returning @@ -30,6 +33,9 @@ def load_node_by_id_attr(): @raise exception: on error """ node_id = request.form['id'] + + __sanitize_input(node_id) + op = dbc.DBO_load_node_set_by_id_attribute([node_id]) try: n = db_ctl.exec_op(op) @@ -40,5 +46,9 @@ def load_node_by_id_attr(): @webapp.route("/add/node-single", methods=['POST']) def add_node(n): - + pass + +@webapp.route("/add/node-set", methods=['POST']) +def add_node_set(n_set): + op = dbc.DBO_add_node_set() pass |
