Add config option to disable dynamic queries

Author: dedmen

addons/config.yaml

@@ -0,0 +1,19 @@
+global:
+ enableDynamicQueries: true #Allow queries to be created from SQF, if false only statements from config are allowed
+
+accounts:
+ maindb: #production db, don't break things here!
+  ip: stuff
+  username: root
+  password: pw
+  database: db
+  port: 3306 #optional
+
+statements:
+ #getMissionName: SELECT intel_missionen.`name` FROM intel_missionen WHERE intel_missionen.id > ?
+ getMissionName: SELECT 1
+
+#DB_query = dbPrepareQueryConfig ["getMissionName", [400]];
+#DB_connection = dbCreateConnection "maindb";
+#DB_query = dbPrepareQueryConfig "getMissionName";
+#DB_connection dbExecuteAsync DB_query;

src/config.cpp

@@ -61,6 +61,12 @@ void Config::reloadConfig() {
         statements[stmtName] = it.second.as<r_string>();
     }
 
+    if (!config["global"].IsMap()) throw std::runtime_error("Config Global entry is not a map");
+
+    dynamicQueriesEnabled = config["global"]["enableDynamicQueries"].as<bool>(true);
+
+
+
 
 }
 

src/config.h

@@ -22,13 +22,18 @@ class Config : public intercept::singleton<Config> {
         return found->second;
     }
 
+    bool areDynamicQueriesEnabled() const {
+        return dynamicQueriesEnabled;
+    }
+
     static void initCommands();
     static inline registered_sqf_function handle_cmd_reloadConfig;
     static inline registered_sqf_function handle_cmd_version;
 
 private:
     std::map<intercept::types::r_string, mariadb::account_ref> accounts;
     std::map<intercept::types::r_string, intercept::types::r_string> statements;
+    bool dynamicQueriesEnabled = true;
 
 
 

src/query.cpp

@@ -12,7 +12,12 @@ game_data* createGameDataDBQuery(param_archive* ar) {
 }
 
 
-game_value Query::cmd_prepareQuery(game_state&, game_value_parameter right) {
+game_value Query::cmd_prepareQuery(game_state& gs, game_value_parameter right) {
+    if (!Config::get().areDynamicQueriesEnabled()) {
+        gs.set_script_error(game_state::game_evaluator::evaluator_error_type::div_zero,
+            "Dynamic queries have been disabled in config"sv);
+        return {};
+    }
     auto query = new GameDataDBQuery();
 
     query->queryString = right;
@@ -21,6 +26,11 @@ game_value Query::cmd_prepareQuery(game_state&, game_value_parameter right) {
 }
 
 game_value Query::cmd_prepareQueryAr(game_state& gs, game_value_parameter right) {
+    if (!Config::get().areDynamicQueriesEnabled()) {
+        gs.set_script_error(game_state::game_evaluator::evaluator_error_type::div_zero,
+            "Dynamic queries have been disabled in config"sv);
+        return {};
+    }
     if (right.size() < 1) {
          gs.set_script_error(game_state::game_evaluator::evaluator_error_type::dim, 
                 "Not enough arguments provided, expected 2 but got 0"sv);