From 96f147ef535b4548d3130cee665754c697d6294f Mon Sep 17 00:00:00 2001
From: Ranjiwei <32759763+r350178982@users.noreply.github.com>
Date: Thu, 21 Aug 2025 14:09:25 +0800
Subject: [PATCH] update (#8152)

---
 seahub/oauth/views.py  | 15 ++++++++-------
 seahub/utils/db_api.py |  4 ++--
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/seahub/oauth/views.py b/seahub/oauth/views.py
index 62bb3f3b91..c9f25109d8 100644
--- a/seahub/oauth/views.py
+++ b/seahub/oauth/views.py
@@ -85,13 +85,14 @@ def oauth_check(func):
                     or not REDIRECT_URL or not TOKEN_URL or not USER_INFO_URL \
                     or not SCOPE or not OAUTH_PROVIDER:
                 logger.error('OAuth relevant settings invalid.')
-                logger.error('CLIENT_ID: %s' % CLIENT_ID)
-                logger.error('AUTHORIZATION_URL: %s' % AUTHORIZATION_URL)
-                logger.error('REDIRECT_URL: %s' % REDIRECT_URL)
-                logger.error('TOKEN_URL: %s' % TOKEN_URL)
-                logger.error('USER_INFO_URL: %s' % USER_INFO_URL)
-                logger.error('SCOPE: %s' % SCOPE)
-                logger.error('OAUTH_PROVIDER: %s' % OAUTH_PROVIDER)
+                logger.error('CLIENT_ID_ASSIGNED: %s' % bool(CLIENT_ID))
+                logger.error('AUTHORIZATION_URL_ASSIGNED: %s' % bool(AUTHORIZATION_URL))
+                logger.error('REDIRECT_URL_ASSIGNED: %s' % bool(REDIRECT_URL))
+                logger.error('TOKEN_URL_ASSIGNED: %s' % bool(TOKEN_URL))
+                logger.error('USER_INFO_URL_ASSIGNED: %s' % bool(USER_INFO_URL))
+                logger.error('SCOPE_ASSIGNED: %s' % bool(SCOPE))
+                logger.error('OAUTH_PROVIDER_ASSIGNED: %s' % bool(OAUTH_PROVIDER))
+                logger.error('CLIENT_SECRET_ASSIGNED: %s' % bool(CLIENT_SECRET))
                 error = True
 
         if error:
diff --git a/seahub/utils/db_api.py b/seahub/utils/db_api.py
index ebed377cf2..7de6bbd712 100644
--- a/seahub/utils/db_api.py
+++ b/seahub/utils/db_api.py
@@ -760,10 +760,10 @@ class SeafileDB:
 
         path = normalize_file_path(path)
         sql = f"""
-        select repo_id from `{self.db_name}`.`VirtualRepo` where origin_repo="{original_repo_id}" AND path="{path}"
+        select repo_id from `{self.db_name}`.`VirtualRepo` where origin_repo=%s AND path=%s
         """
         with connection.cursor() as cursor:
-            cursor.execute(sql)
+            cursor.execute(sql, [original_repo_id, path])
             res = cursor.fetchone()
 
         return res and res[0] or None