yaso_meth/mih-project
2
4
Fork 2
Code Issues 8 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

verify api calls and do lower case db check

Browse Source
This commit is contained in:
yaso-meth
2024-07-25 16:48:48 +02:00
parent cbfa6002be
commit 8e1d7978c0
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
backend/routers/patients.py
View File

@@ -71,7 +71,7 @@ async def read_patientByID(pat_id: str, session: SessionContainer = Depends(veri
# Get Patient By ID Number # Get Patient By ID Number
@router.get("/patients/{id_no}", tags="patients") @router.get("/patients/{id_no}", tags="patients")
async def read_patientByID(id_no: str): async def read_patientByID(id_no: str, session: SessionContainer = Depends(verify_session())):
db = database.dbConnection.dbConnect() db = database.dbConnection.dbConnect()
cursor = db.cursor() cursor = db.cursor()
query = "SELECT * FROM patients WHERE id_no=%s" query = "SELECT * FROM patients WHERE id_no=%s"
@@ -95,11 +95,11 @@ async def read_patientByID(id_no: str):
# Get Patient By ID Number # Get Patient By ID Number
@router.get("/patients/{email}", tags="patients") @router.get("/patients/{email}", tags="patients")
async def read_patientByID(id_no: str): async def read_patientByID(email: str, session: SessionContainer = Depends(verify_session())):
db = database.dbConnection.dbConnect() db = database.dbConnection.dbConnect()
cursor = db.cursor() cursor = db.cursor()
query = "SELECT * FROM patients WHERE email=%s" query = "SELECT * FROM patients WHERE lower(email)=%s"
cursor.execute(query, (id_no,)) cursor.execute(query, (email.lower(),))
item = cursor.fetchone() item = cursor.fetchone()
cursor.close() cursor.close()
db.close() db.close()