sql-rewriter 0.0.1

data/lib/sql-rewriter.rb

@@ -0,0 +1,37 @@
+module SQLRewriter
+  
+  require 'sql-parser'
+  
+  require_relative 'sql-rewriter/hooks'
+  require_relative 'sql-rewriter/adapters'
+  
+  class << self
+    attr_accessor :before_hook
+    attr_accessor :after_hook
+  end
+  
+  self.before_hook = nil
+  self.after_hook = nil
+  
+  def self.inject(adapter, &block)
+    
+    if adapter.to_s == 'ActiveRecord'
+      SQLRewriter::Adapters::ActiveRecord.inject
+    else
+      raise 'No adapter for ' + adapter.to_s
+    end
+    
+    instance_eval(&block)
+    
+  end
+  
+  
+  def self.before_query(&block)
+    self.before_hook = block
+  end
+  
+  def self.after_query(&block)
+    self.after_hook = block
+  end
+  
+end

data/lib/sql-rewriter/adapters.rb

@@ -0,0 +1,105 @@
+module SQLRewriter
+  
+  module Adapters
+    
+    class ActiveRecord
+      
+      # Most of this code is lifted from the Marginalia gem
+      def self.inject
+      
+        if defined? ::ActiveRecord::ConnectionAdapters::Mysql2Adapter
+          if ::ActiveRecord::Base.connection.is_a?(
+              ::ActiveRecord::ConnectionAdapters::Mysql2Adapter)
+            ::ActiveRecord::ConnectionAdapters::Mysql2Adapter.module_eval do
+              include SQLRewriter::Adapters::ActiveRecord::Decorator
+            end
+          end
+        end
+
+        if defined? ::ActiveRecord::ConnectionAdapters::MysqlAdapter
+          if ::ActiveRecord::Base.connection.is_a?(
+              ::ActiveRecord::ConnectionAdapters::MysqlAdapter)
+            ::ActiveRecord::ConnectionAdapters::MysqlAdapter.module_eval do
+              include SQLRewriter::Adapters::ActiveRecord::Decorator
+            end
+          end
+        end
+
+        # SQL queries made through PostgreSQLAdapter#exec_delete will not be annotated.
+        if defined? ::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter
+          if ::ActiveRecord::Base.connection.is_a?(
+              ::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter)
+            ::ActiveRecord::ConnectionAdapters::PostgreSQLAdapter.module_eval do
+              include SQLRewriter::Adapters::ActiveRecord::Decorator
+            end
+          end
+        end
+
+        if defined? ::ActiveRecord::ConnectionAdapters::SQLite3Adapter
+          if ::ActiveRecord::Base.connection.is_a?(
+              ::ActiveRecord::ConnectionAdapters::SQLite3Adapter)
+            ::ActiveRecord::ConnectionAdapters::SQLite3Adapter.module_eval do
+              include SQLRewriter::Adapters::ActiveRecord::Decorator
+            end
+          end
+        end
+        
+      end
+      
+      if defined? Rails::Railtie
+        require 'rails/railtie'
+
+        class Railtie < Rails::Railtie
+        
+          initializer 'SQLRewriter.insert' do
+            ActiveSupport.on_load :active_record do
+              SQLRewriter::ActiveRecord::Decorator.insert_into_active_record
+            end
+          end
+        
+        end
+
+      end
+
+      module Decorator
+        
+        include SQLRewriter::Hooks::AfterQuery
+        include SQLRewriter::Hooks::BeforeQuery
+        
+        def self.included(decorated_class)
+ 
+          decorated_class.class_eval do
+            if decorated_class.method_defined?(:execute)
+              alias_method :execute_without_sqlr, :execute
+              alias_method :execute, :execute_with_sqlr
+            end
+
+            is_mysql2 = defined?(ActiveRecord::ConnectionAdapters::Mysql2Adapter) &&
+              ActiveRecord::ConnectionAdapters::Mysql2Adapter == decorated_class
+
+            # Dont instrument exec_query on mysql2 and AR 3.2+, as it calls execute internally
+            unless is_mysql2 && ActiveRecord::VERSION::STRING > "3.1"
+              if decorated_class.method_defined?(:exec_query)
+                alias_method :exec_query_without_sqlr, :exec_query
+                alias_method :exec_query, :exec_query_with_sqlr
+              end
+            end
+          end
+        end
+
+        def execute_with_sqlr(sql, name = nil, binds)
+          after_query(execute_without_sqlr(before_query(sql, binds), name))
+          
+        end
+
+        def exec_query_with_sqlr(sql, name = 'SQL', binds = [])
+          after_query(exec_query_without_sqlr(before_query(sql, binds), name, binds))
+        end
+
+      end
+    
+    end
+  
+  end
+  
+end

data/lib/sql-rewriter/hooks.rb

@@ -0,0 +1,46 @@
+module SQLRewriter
+  
+  module Hooks
+    
+    module AfterQuery
+
+      def after_query(result)
+
+        SQLRewriter.after_hook.call(result)
+
+      end
+
+    end
+
+    module BeforeQuery
+
+      def before_query(sql, binds)
+
+        begin
+
+          sql_spliced = sql.dup
+
+          binds.map(&:last).each do |bind|
+            sql_spliced.sub!('?', '"' + bind + '"')
+          end
+
+          parser = SQLParser::Parser.new
+          ast = parser.scan_str(sql_spliced)
+
+          res = SQLRewriter.before_hook.call(sql, binds, ast)
+
+          res.to_sql
+
+        rescue
+
+          SQLRewriter.before_hook.call(sql, binds, nil)
+
+        end
+
+      end
+
+    end
+  
+  end
+  
+end

data/lib/sql-rewriter/version.rb

@@ -0,0 +1,5 @@
+module SQLRewriter
+
+  VERSION = '0.0.1'
+  
+end

metadata

@@ -0,0 +1,97 @@
+--- !ruby/object:Gem::Specification
+name: sql-rewriter
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Louis Mullie
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-04-17 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: sql-parser
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: ! ' Ruby library for SQL injection and re-writing in ActiveRecord '
+email:
+- louis.mullie@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/sql-rewriter/adapters.rb
+- lib/sql-rewriter/hooks.rb
+- lib/sql-rewriter/version.rb
+- lib/sql-rewriter.rb
+homepage: https://github.com/louismullie/sql-parser
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.25
+signing_key: 
+specification_version: 3
+summary: Ruby library for SQL injection and re-writing in ActiveRecord
+test_files: []