Mise à jour de sécurité

CenRa_POSTGIS/postgis_creator.py

@@ -15,7 +15,7 @@ from PyQt5 import QtGui
 from qgis.core import *
 from qgis.core import QgsDataSourceUri
 
-from .tools.PythonSQL import *
+from .tools.PythonSQL import login_base
 from .tools.SQLRequet import *
 
 from .tools.resources import (
@@ -76,15 +76,14 @@ class Postgis_Creator(QDialog, EDITOR_CLASS):
                 if self.nom.text().find(car) != -1 :
                     QMessageBox.warning(None, "Oups :", u"Le nom de dossier ne doit pas comporter de caractères spéciaux, ni d'espaces !\n\n\t" + self.nom.text().lower() )
                     return
-            first_conn = psycopg2.connect("host=" + host + " port=" + port + " dbname="+dbname+" user=first_cnx password=" + password)
-            first_cur = first_conn.cursor(cursor_factory = psycopg2.extras.DictCursor)
-            first_cur.execute("SELECT mdp_w, login_w FROM pg_catalog.pg_user t1, admin_sig.vm_users_sig t2 WHERE t2.oid = t1.usesysid AND (login_w = '" + os_user + "' OR login_w = '" + os_user + "')")
-            res_ident = first_cur.fetchone()
-            mdp = base64.b64decode(str(res_ident[0])).decode('utf-8')
-            user = res_ident[1]
-            con = psycopg2.connect("host=" + host + " port=" + port + " dbname="+dbname+" user=" + user + " password=" + mdp)
-            cur = con.cursor(cursor_factory = psycopg2.extras.DictCursor)
-            first_conn.close()
+            account = login_base("account")
+            user = account[0]
+            mdp = account[1]
+            host = account[2]
+            port = account[3]
+            dbname = account[4]
+            cur = account[7]
+            con = account[8]
 
             SQL_schema = "CREATE SCHEMA " + schema + ";"
             SQL_GRANT_SCHEMA="GRANT CREATE, USAGE ON SCHEMA "+schema+" TO grp_qgis; GRANT CREATE, USAGE ON SCHEMA "+schema+" TO grp_sig;"