Remove sql injection problem

lp bug: https://launchpad.net/bugs/429327 fixed

bzr revid: hda@tinyerp.com-20091021072449-rc9usc422tb0kv2f

1 files changed, 233 insertions, 232 deletions

diff --git a/addons/auction/barcode/code93.py b/addons/auction/barcode/code93.py
index bb556829687..697841092a1 100644
--- a/addons/auction/barcode/code93.py
+++ b/addons/auction/barcode/code93.py
@@ -1,233 +1,234 @@
-#

-# Copyright (c) 2000 Tyler C. Sarna <tsarna@sarna.org>

-# All rights reserved.

-#

-# Redistribution and use in source and binary forms, with or without

-# modification, are permitted provided that the following conditions

-# are met:

-# 1. Redistributions of source code must retain the above copyright

-#    notice, this list of conditions and the following disclaimer.

-# 2. Redistributions in binary form must reproduce the above copyright

-#    notice, this list of conditions and the following disclaimer in the

-#    documentation and/or other materials provided with the distribution.

-# 3. All advertising materials mentioning features or use of this software

-#    must display the following acknowledgement:

-#      This product includes software developed by Tyler C. Sarna.

-# 4. Neither the name of the author nor the names of contributors

-#    may be used to endorse or promote products derived from this software

-#    without specific prior written permission.

-#

-# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND

-# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

-# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

-# PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS

-# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR

-# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

-# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

-# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

-# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

-# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

-# POSSIBILITY OF SUCH DAMAGE.

-#

-

-from reportlab.lib.units import inch

-from common import MultiWidthBarcode

-import string

-

-_patterns = {

-  '0' : ('AcAaAb', 0),  '1' : ('AaAbAc', 1),  '2' : ('AaAcAb', 2),

-  '3' : ('AaAdAa', 3),  '4' : ('AbAaAc', 4),  '5' : ('AbAbAb', 5),

-  '6' : ('AbAcAa', 6),  '7' : ('AaAaAd', 7),  '8' : ('AcAbAa', 8),

-  '9' : ('AdAaAa', 9),  'A' : ('BaAaAc', 10), 'B' : ('BaAbAb', 11),

-  'C' : ('BaAcAa', 12), 'D' : ('BbAaAb', 13), 'E' : ('BbAbAa', 14),

-  'F' : ('BcAaAa', 15), 'G' : ('AaBaAc', 16), 'H' : ('AaBbAb', 17),

-  'I' : ('AaBcAa', 18), 'J' : ('AbBaAb', 19), 'K' : ('AcBaAa', 20),

-  'L' : ('AaAaBc', 21), 'M' : ('AaAbBb', 22), 'N' : ('AaAcBa', 23),

-  'O' : ('AbAaBb', 24), 'P' : ('AcAaBa', 25), 'Q' : ('BaBaAb', 26),

-  'R' : ('BaBbAa', 27), 'S' : ('BaAaBb', 28), 'T' : ('BaAbBa', 29),

-  'U' : ('BbAaBa', 30), 'V' : ('BbBaAa', 31), 'W' : ('AaBaBb', 32),

-  'X' : ('AaBbBa', 33), 'Y' : ('AbBaBa', 34), 'Z' : ('AbCaAa', 35),

-  '-' : ('AbAaCa', 36), '.' : ('CaAaAb', 37), ' ' : ('CaAbAa', 38),

-  '$' : ('CbAaAa', 39), '/' : ('AaBaCa', 40), '+' : ('AaCaBa', 41),

-  '%' : ('BaAaCa', 42), '#' : ('AbAbBa', 43), '!' : ('CaBaAa', 44),

-  '=' : ('CaAaBa', 45), '&' : ('AbBbAa', 46),

-  'start' : ('AaAaDa', -1),  'stop' : ('AaAaDaA', -2)

-}

-

-_charsbyval = {}

-for k, v in _patterns.items():

-    _charsbyval[v[1]] = k

-

-_extended = {

-    '\x00' : '!U',    '\x01' : '#A',    '\x02' : '#B',    '\x03' : '#C',

-    '\x04' : '#D',    '\x05' : '#E',    '\x06' : '#F',    '\x07' : '#G',

-    '\x08' : '#H',    '\x09' : '#I',    '\x0a' : '#J',    '\x0b' : '#K',

-    '\x0c' : '#L',    '\x0d' : '#M',    '\x0e' : '#N',    '\x0f' : '#O',

-    '\x10' : '#P',    '\x11' : '#Q',    '\x12' : '#R',    '\x13' : '#S',

-    '\x14' : '#T',    '\x15' : '#U',    '\x16' : '#V',    '\x17' : '#W',

-    '\x18' : '#X',    '\x19' : '#Y',    '\x1a' : '#Z',    '\x1b' : '!A',

-    '\x1c' : '!B',    '\x1d' : '!C',    '\x1e' : '!D',    '\x1f' : '!E',

-    '!'    : '=A',    '"'    : '=B',    '#'    : '=C',    '$'    : '=D',

-    '%'    : '=E',    '&'    : '=F',    '\''   : '=G',    '('    : '=H',

-    ')'    : '=I',    '*'    : '=J',    '+'    : '=K',    ','    : '=L',

-    '/'    : '=O',    ':'    : '=Z',    ';'    : '!F',    '<'    : '!G',

-    '='    : '!H',    '>'    : '!I',    '?'    : '!J',    '@'    : '!V',

-    '['    : '!K',    '\\'   : '!L',    ']'    : '!M',    '^'    : '!N',

-    '_'    : '!O',    '`'    : '!W',    'a'    : '&A',    'b'    : '&B',

-    'c'    : '&C',    'd'    : '&D',    'e'    : '&E',    'f'    : '&F',

-    'g'    : '&G',    'h'    : '&H',    'i'    : '&I',    'j'    : '&J',

-    'k'    : '&K',    'l'    : '&L',    'm'    : '&M',    'n'    : '&N',

-    'o'    : '&O',    'p'    : '&P',    'q'    : '&Q',    'r'    : '&R',

-    's'    : '&S',    't'    : '&T',    'u'    : '&U',    'v'    : '&V',

-    'w'    : '&W',    'x'    : '&X',    'y'    : '&Y',    'z'    : '&Z',

-    '{'    : '!P',    '|'    : '!Q',    '}'    : '!R',    '~'    : '!S',

-    '\x7f' : '!T'

-}

-

-

-def _encode93(str):

-    s = map(None, str)

-    s.reverse()

-

-    # compute 'C' checksum

-    i = 0; v = 1; c = 0

-    while i < len(s):

-        c = c + v * _patterns[s[i]][1]

-        i = i + 1; v = v + 1

-        if v > 20:

-            v = 1

-    s.insert(0, _charsbyval[c % 47])

-

-    # compute 'K' checksum

-    i = 0; v = 1; c = 0

-    while i < len(s):

-        c = c + v * _patterns[s[i]][1]

-        i = i + 1; v = v + 1

-        if v > 15:

-            v = 1

-    s.insert(0, _charsbyval[c % 47])

-

-    s.reverse()

-

-    return string.join(s, '')

-

-

-class _Code93Base(MultiWidthBarcode):

-    def __init__(self, value='', **args):

-        self.xdim = inch * 0.0075

-        self.lquiet = None

-        self.rquiet = None

-        self.quiet = 1

-        self.height = None

-

-        if type(value) is type(1):

-            value = str(value)

-            

-        for (k, v) in args.items():

-            setattr(self, k, v)

-

-        if self.quiet:

-            if self.lquiet is None:

-                self.lquiet = max(inch * 0.25, self.xdim * 10.0)

-                self.rquiet = max(inch * 0.25, self.xdim * 10.0)

-        else:

-            self.lquiet = self.rquiet = 0.0

-

-        MultiWidthBarcode.__init__(self, value)

-

-    def decompose(self):

-        dval = _patterns['start'][0]

-        for c in self.encoded:

-            dval = dval + _patterns[c][0]

-        self.decomposed = dval + _patterns['stop'][0]

-        return self.decomposed

-

-

-class Standard93(_Code93Base):

-    """

-    Code 93 is a Uppercase alphanumeric symbology with some punctuation.

-    See Extended Code 93 for a variant that can represent the entire

-    128 characrter ASCII set.

-    

-    Options that may be passed to constructor:

-

-        value (int, or numeric string. required.):

-            The value to encode.

-   

-        xdim (float, default .0075):

-            X-Dimension, or width of the smallest element

-            Minumum is .0075 inch (7.5 mils).

-            

-        height (float, see default below):

-            Height of the symbol.  Default is the height of the two

-            bearer bars (if they exist) plus the greater of .25 inch

-            or .15 times the symbol's length.

-

-        quiet (bool, default 1):

-            Wether to include quiet zones in the symbol.

-            

-        lquiet (float, see default below):

-            Quiet zone size to left of code, if quiet is true.

-            Default is the greater of .25 inch, or 10 xdim

-            

-        rquiet (float, defaults as above):

-            Quiet zone size to right left of code, if quiet is true.

-

-    Sources of Information on Code 93:

-

-    http://www.semiconductor.agilent.com/barcode/sg/Misc/code_93.html

-

-    Official Spec, "NSI/AIM BC5-1995, USS" is available for US$45 from

-    http://www.aimglobal.org/aimstore/

-    """

-

-    def validate(self):

-        vval = ""

-        self.valid = 1

-        for c in self.value:

-            if c in string.lowercase:

-                c = string.upper(c)

-            if not _patterns.has_key(c):

-                self.valid = 0

-                continue

-            vval = vval + c

-        self.validated = vval

-        return vval

-

-    def encode(self):

-        self.encoded = _encode93(self.validated)

-        return self.encoded

-

-

-class Extended93(_Code93Base):

-    """

-    Extended Code 93 is a convention for encoding the entire 128 character

-    set using pairs of characters to represent the characters missing in

-    Standard Code 93. It is very much like Extended Code 39 in that way.

-    

-    See Standard93 for arguments.

-    """    

-

-    def validate(self):

-        vval = ""

-        self.valid = 1

-        for c in self.value:

-            if not _patterns.has_key(c) and not _extended.has_key(c):

-                self.valid = 0

-                continue

-            vval = vval + c

-        self.validated = vval

-        return vval

-

-    def encode(self):

-        self.encoded = ""

-        for c in self.validated:

-            if _patterns.has_key(c):

-                self.encoded = self.encoded + c

-            elif _extended.has_key(c):

-                self.encoded = self.encoded + _extended[c]

-            else:

-                raise ValueError

-        self.encoded = _encode93(self.encoded)

-        return self.encoded

+# -*- coding: utf-8 -*-
+#
+# Copyright (c) 2000 Tyler C. Sarna <tsarna@sarna.org>
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 1. Redistributions of source code must retain the above copyright
+#    notice, this list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright
+#    notice, this list of conditions and the following disclaimer in the
+#    documentation and/or other materials provided with the distribution.
+# 3. All advertising materials mentioning features or use of this software
+#    must display the following acknowledgement:
+#      This product includes software developed by Tyler C. Sarna.
+# 4. Neither the name of the author nor the names of contributors
+#    may be used to endorse or promote products derived from this software
+#    without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+# PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
+# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+# POSSIBILITY OF SUCH DAMAGE.
+#
+
+from reportlab.lib.units import inch
+from common import MultiWidthBarcode
+import string
+
+_patterns = {
+  '0' : ('AcAaAb', 0),  '1' : ('AaAbAc', 1),  '2' : ('AaAcAb', 2),
+  '3' : ('AaAdAa', 3),  '4' : ('AbAaAc', 4),  '5' : ('AbAbAb', 5),
+  '6' : ('AbAcAa', 6),  '7' : ('AaAaAd', 7),  '8' : ('AcAbAa', 8),
+  '9' : ('AdAaAa', 9),  'A' : ('BaAaAc', 10), 'B' : ('BaAbAb', 11),
+  'C' : ('BaAcAa', 12), 'D' : ('BbAaAb', 13), 'E' : ('BbAbAa', 14),
+  'F' : ('BcAaAa', 15), 'G' : ('AaBaAc', 16), 'H' : ('AaBbAb', 17),
+  'I' : ('AaBcAa', 18), 'J' : ('AbBaAb', 19), 'K' : ('AcBaAa', 20),
+  'L' : ('AaAaBc', 21), 'M' : ('AaAbBb', 22), 'N' : ('AaAcBa', 23),
+  'O' : ('AbAaBb', 24), 'P' : ('AcAaBa', 25), 'Q' : ('BaBaAb', 26),
+  'R' : ('BaBbAa', 27), 'S' : ('BaAaBb', 28), 'T' : ('BaAbBa', 29),
+  'U' : ('BbAaBa', 30), 'V' : ('BbBaAa', 31), 'W' : ('AaBaBb', 32),
+  'X' : ('AaBbBa', 33), 'Y' : ('AbBaBa', 34), 'Z' : ('AbCaAa', 35),
+  '-' : ('AbAaCa', 36), '.' : ('CaAaAb', 37), ' ' : ('CaAbAa', 38),
+  '$' : ('CbAaAa', 39), '/' : ('AaBaCa', 40), '+' : ('AaCaBa', 41),
+  '%' : ('BaAaCa', 42), '#' : ('AbAbBa', 43), '!' : ('CaBaAa', 44),
+  '=' : ('CaAaBa', 45), '&' : ('AbBbAa', 46),
+  'start' : ('AaAaDa', -1),  'stop' : ('AaAaDaA', -2)
+}
+
+_charsbyval = {}
+for k, v in _patterns.items():
+    _charsbyval[v[1]] = k
+
+_extended = {
+    '\x00' : '!U',    '\x01' : '#A',    '\x02' : '#B',    '\x03' : '#C',
+    '\x04' : '#D',    '\x05' : '#E',    '\x06' : '#F',    '\x07' : '#G',
+    '\x08' : '#H',    '\x09' : '#I',    '\x0a' : '#J',    '\x0b' : '#K',
+    '\x0c' : '#L',    '\x0d' : '#M',    '\x0e' : '#N',    '\x0f' : '#O',
+    '\x10' : '#P',    '\x11' : '#Q',    '\x12' : '#R',    '\x13' : '#S',
+    '\x14' : '#T',    '\x15' : '#U',    '\x16' : '#V',    '\x17' : '#W',
+    '\x18' : '#X',    '\x19' : '#Y',    '\x1a' : '#Z',    '\x1b' : '!A',
+    '\x1c' : '!B',    '\x1d' : '!C',    '\x1e' : '!D',    '\x1f' : '!E',
+    '!'    : '=A',    '"'    : '=B',    '#'    : '=C',    '$'    : '=D',
+    '%'    : '=E',    '&'    : '=F',    '\''   : '=G',    '('    : '=H',
+    ')'    : '=I',    '*'    : '=J',    '+'    : '=K',    ','    : '=L',
+    '/'    : '=O',    ':'    : '=Z',    ';'    : '!F',    '<'    : '!G',
+    '='    : '!H',    '>'    : '!I',    '?'    : '!J',    '@'    : '!V',
+    '['    : '!K',    '\\'   : '!L',    ']'    : '!M',    '^'    : '!N',
+    '_'    : '!O',    '`'    : '!W',    'a'    : '&A',    'b'    : '&B',
+    'c'    : '&C',    'd'    : '&D',    'e'    : '&E',    'f'    : '&F',
+    'g'    : '&G',    'h'    : '&H',    'i'    : '&I',    'j'    : '&J',
+    'k'    : '&K',    'l'    : '&L',    'm'    : '&M',    'n'    : '&N',
+    'o'    : '&O',    'p'    : '&P',    'q'    : '&Q',    'r'    : '&R',
+    's'    : '&S',    't'    : '&T',    'u'    : '&U',    'v'    : '&V',
+    'w'    : '&W',    'x'    : '&X',    'y'    : '&Y',    'z'    : '&Z',
+    '{'    : '!P',    '|'    : '!Q',    '}'    : '!R',    '~'    : '!S',
+    '\x7f' : '!T'
+}
+
+
+def _encode93(str):
+    s = map(None, str)
+    s.reverse()
+
+    # compute 'C' checksum
+    i = 0; v = 1; c = 0
+    while i < len(s):
+        c = c + v * _patterns[s[i]][1]
+        i = i + 1; v = v + 1
+        if v > 20:
+            v = 1
+    s.insert(0, _charsbyval[c % 47])
+
+    # compute 'K' checksum
+    i = 0; v = 1; c = 0
+    while i < len(s):
+        c = c + v * _patterns[s[i]][1]
+        i = i + 1; v = v + 1
+        if v > 15:
+            v = 1
+    s.insert(0, _charsbyval[c % 47])
+
+    s.reverse()
+
+    return string.join(s, '')
+
+
+class _Code93Base(MultiWidthBarcode):
+    def __init__(self, value='', **args):
+        self.xdim = inch * 0.0075
+        self.lquiet = None
+        self.rquiet = None
+        self.quiet = 1
+        self.height = None
+
+        if type(value) is type(1):
+            value = str(value)
+            
+        for (k, v) in args.items():
+            setattr(self, k, v)
+
+        if self.quiet:
+            if self.lquiet is None:
+                self.lquiet = max(inch * 0.25, self.xdim * 10.0)
+                self.rquiet = max(inch * 0.25, self.xdim * 10.0)
+        else:
+            self.lquiet = self.rquiet = 0.0
+
+        MultiWidthBarcode.__init__(self, value)
+
+    def decompose(self):
+        dval = _patterns['start'][0]
+        for c in self.encoded:
+            dval = dval + _patterns[c][0]
+        self.decomposed = dval + _patterns['stop'][0]
+        return self.decomposed
+
+
+class Standard93(_Code93Base):
+    """
+    Code 93 is a Uppercase alphanumeric symbology with some punctuation.
+    See Extended Code 93 for a variant that can represent the entire
+    128 characrter ASCII set.
+    
+    Options that may be passed to constructor:
+
+        value (int, or numeric string. required.):
+            The value to encode.
+   
+        xdim (float, default .0075):
+            X-Dimension, or width of the smallest element
+            Minumum is .0075 inch (7.5 mils).
+            
+        height (float, see default below):
+            Height of the symbol.  Default is the height of the two
+            bearer bars (if they exist) plus the greater of .25 inch
+            or .15 times the symbol's length.
+
+        quiet (bool, default 1):
+            Wether to include quiet zones in the symbol.
+            
+        lquiet (float, see default below):
+            Quiet zone size to left of code, if quiet is true.
+            Default is the greater of .25 inch, or 10 xdim
+            
+        rquiet (float, defaults as above):
+            Quiet zone size to right left of code, if quiet is true.
+
+    Sources of Information on Code 93:
+
+    http://www.semiconductor.agilent.com/barcode/sg/Misc/code_93.html
+
+    Official Spec, "NSI/AIM BC5-1995, USS" is available for US$45 from
+    http://www.aimglobal.org/aimstore/
+    """
+
+    def validate(self):
+        vval = ""
+        self.valid = 1
+        for c in self.value:
+            if c in string.lowercase:
+                c = string.upper(c)
+            if not _patterns.has_key(c):
+                self.valid = 0
+                continue
+            vval = vval + c
+        self.validated = vval
+        return vval
+
+    def encode(self):
+        self.encoded = _encode93(self.validated)
+        return self.encoded
+
+
+class Extended93(_Code93Base):
+    """
+    Extended Code 93 is a convention for encoding the entire 128 character
+    set using pairs of characters to represent the characters missing in
+    Standard Code 93. It is very much like Extended Code 39 in that way.
+    
+    See Standard93 for arguments.
+    """    
+
+    def validate(self):
+        vval = ""
+        self.valid = 1
+        for c in self.value:
+            if not _patterns.has_key(c) and not _extended.has_key(c):
+                self.valid = 0
+                continue
+            vval = vval + c
+        self.validated = vval
+        return vval
+
+    def encode(self):
+        self.encoded = ""
+        for c in self.validated:
+            if _patterns.has_key(c):
+                self.encoded = self.encoded + c
+            elif _extended.has_key(c):
+                self.encoded = self.encoded + _extended[c]
+            else:
+                raise ValueError
+        self.encoded = _encode93(self.encoded)
+        return self.encoded
 # vim:expandtab:smartindent:tabstop=4:softtabstop=4:shiftwidth=4: