X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fsearch%2Fsql.html;h=bf54469753c200868f4a50f82c16e6d4e1b5f760;hb=d8299144d2175f1695adafe29e9549bd9b158e2f;hp=e61ce1538cf151be9ae91a3653889b399cb13573;hpb=ef7bb336cc67f127fb1d77532ad3da1369c0ae36;p=freeside.git

diff --git a/httemplate/search/sql.html b/httemplate/search/sql.html
index e61ce1538..bf5446975 100644
--- a/httemplate/search/sql.html
+++ b/httemplate/search/sql.html
@@ -1,8 +1,15 @@
-<%= include( '/elements/header', 'Query Results',
-               include( '/elements/menubar', 'Main Menu' => $p )
-%>
-<%= include( 'elements/search.html',
-               'name' => 'rows',
-             
+<% include( 'elements/search.html',
+               'title' => 'Query Results',
+               'name'  => 'rows',
+               'query' => "SELECT $sql",
+          )
 %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Raw SQL');
+
+my $sql = $cgi->param('sql') or errorpage('Empty query');
+$sql =~ s/;+\s*$//; #remove trailing ;
 
+</%init>