From ac48aada3080397b3b109b7460ebab5b19b7ca1d Mon Sep 17 00:00:00 2001 From: Matt Stancliff Date: Wed, 6 Aug 2014 16:56:23 -0400 Subject: [PATCH] Deny CLIENT command in scripts We don't want scripts doing CLIENT SETNAME or CLIENT KILL or CLIENT LIST or CLIENT PAUSE. Originally reported by Chris Wj then proper action inspired by Itamar Haber. Reference: https://groups.google.com/forum/#!topic/redis-db/09B2EYwyVgk --- src/redis.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/redis.c b/src/redis.c index 785cf6e5..ba1bf4e4 100644 --- a/src/redis.c +++ b/src/redis.c @@ -258,7 +258,7 @@ struct redisCommand redisCommandTable[] = { {"migrate",migrateCommand,6,"aw",0,NULL,0,0,0,0,0}, {"dump",dumpCommand,2,"ar",0,NULL,1,1,1,0,0}, {"object",objectCommand,3,"r",0,NULL,2,2,2,0,0}, - {"client",clientCommand,-2,"ar",0,NULL,0,0,0,0,0}, + {"client",clientCommand,-2,"ars",0,NULL,0,0,0,0,0}, {"eval",evalCommand,-3,"s",0,zunionInterGetKeys,0,0,0,0,0}, {"evalsha",evalShaCommand,-3,"s",0,zunionInterGetKeys,0,0,0,0,0}, {"slowlog",slowlogCommand,-2,"r",0,NULL,0,0,0,0,0},