From 3ebb96e962ca765d3f5519668493c55e93d388de Mon Sep 17 00:00:00 2001
From: Stefano <ste.pigozzi@gmail.com>
Date: Wed, 13 Sep 2017 12:28:00 +0200
Subject: [PATCH] Improve query page

---
 static/style.css    | 18 ++++++++++++++++++
 templates/query.htm | 13 +++++++++----
 2 files changed, 27 insertions(+), 4 deletions(-)

diff --git a/static/style.css b/static/style.css
index eb93fbb..05b3dc6 100644
--- a/static/style.css
+++ b/static/style.css
@@ -26,6 +26,24 @@
     padding-right: 10px;
 }
 
+.string
+{
+    background-color: #c8ffc8;
+    color: #006600;
+}
+
+.number
+{
+    background-color: #c8c8ff;
+    color: #000066;
+}
+
+.bytes
+{
+    background-color: #ffc8c8;
+    color: #660000;
+}
+
 .container-lower
 {
     margin-top: 10px;
diff --git a/templates/query.htm b/templates/query.htm
index c3ed504..40ebc6e 100644
--- a/templates/query.htm
+++ b/templates/query.htm
@@ -5,9 +5,6 @@
     <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
 {% endblock %}
 {% block content %}
-    <div class="alert alert-warning">
-        <b>Attenzione!</b> In questa pagina non è presente alcuna misura per prevenire SQL injection. Eseguite le query a vostro <a href="https://xkcd.com/327/">rischio e pericolo</a>!
-    </div>
     <form action="/query" method="post">
         <div class="form-group">
             <div class="input-group">
@@ -48,7 +45,15 @@
                         {% for row in result %}
                             <tr>
                                 {% for column in row %}
-                                    <td>{{ column }}</td>
+                                    <td>
+                                        {% if column is string %}
+                                            <code class="string">{{ column }}</code>
+                                        {% elif column is number %}
+                                            <code class="number">{{ column }}</code>
+                                        {% else %}
+                                            <code class="bytes">{{ column }}</code>
+                                        {% endif %}
+                                    </td>
                                 {% endfor %}
                             </tr>
                         {% endfor %}