buildmaster/log.php: append "%" to search parameters - they were stripped for security reasons in init.php

1 files changed, 4 insertions, 2 deletions

diff --git a/buildmaster/log.php b/buildmaster/log.php
index 2810d7f..e339db7 100644
--- a/buildmaster/log.php
+++ b/buildmaster/log.php
@@ -15,9 +15,11 @@ require_once BASE . "/lib/mysql.php";
     );
     $join = " LEFT" . mysql_join_ssh_log_build_slaves();
     if (array_key_exists("action", $_GET))
-      $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"]) . "\")";
+      $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"] . "%") . "\")";
+    if (array_key_exists("parameters", $_GET))
+      $filter .= " AND `ssh_log`.`parameters` LIKE from_base64(\"" . base64_encode($_GET["parameters"] . "%") . "\")";
     if (array_key_exists("slave", $_GET))
-      $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"]) . "\")";
+      $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"] . "%") . "\")";
   } elseif (array_key_exists("show", $_GET) &&
     ($_GET["show"] == "command")) {
     $to_show = "command";