The aquaint-backend from austinvaday

aquaint-backend's People

Contributors

Stargazers

Watchers

aquaint-backend's Issues

Object-orient Crawler

Make crawler.py operate like a class instead of a module.

Change globals to member variables, functions to methods,

import crawler
crawler.crawl()

from crawler import Crawler
crawler = Crawler()
crawler.crawl()

Mock-API : follow failure

Mock-API follow request will always fail. Log info:

START RequestId: 85f0496f-9578-11e6-8909-278cad707127 Version: $LATEST
not enough arguments for format string: TypeError
Traceback (most recent call last):
  File "/var/task/mock_api.py", line 142, in handler
    result = delegate(event, sql)
  File "/var/task/mock_api.py", line 58, in follow
    return sql_cd(sql, query)
  File "/var/task/mock_api.py", line 11, in sql_cd
    count = cursor.execute(query, inserts)
  File "/var/task/pymysql/cursors.py", line 164, in execute
    query = self.mogrify(query, args)
  File "/var/task/pymysql/cursors.py", line 143, in mogrify
    query = query % self._escape_args(args, conn)
TypeError: not enough arguments for format string

END RequestId: 85f0496f-9578-11e6-8909-278cad707127
REPORT RequestId: 85f0496f-9578-11e6-8909-278cad707127  Duration: 12.46 ms  Billed Duration: 100 ms

Correct crawler DynamoDB interactions

Change table names and field names in Crawler.py and timeline.Event.from_dynamo to reflect the new DynamoDB naming scheme

Mock API SQL injection vulnerability

The current implementation of the Mock API uses string interpolation rather than query parameterization, making the system extremely vulnerable to SQL injection.

Recommend Projects