allowing DDL, INSERT, UPDATE without crashing the custom query page

IHP/IDE/Data/Controller.hs

@@ -29,21 +29,16 @@ instance Controller DataController where
         connection <- connectToAppDb
         tableNames <- fetchTableNames connection
         primaryKeyFields <- tablePrimaryKeyFields connection tableName
-
         rows :: [[DynamicField]] <- fetchRows connection tableName
-
         tableCols <- fetchTableCols connection tableName
-
         PG.close connection
         render ShowTableRowsView { .. }
 
     action ShowQueryAction = do
         connection <- connectToAppDb
         let query = (param @Text "query")
-        when (query == "") do
-            redirectTo ShowDatabaseAction
-        rows :: [[DynamicField]] <- PG.query_ connection (fromString (cs query))
-
+        when (query == "") $ redirectTo ShowDatabaseAction
+        rows :: [[DynamicField]] <- if isQuery query then PG.query_ connection (fromString (cs query)) else PG.execute_ connection (fromString (cs query)) >> return []
         PG.close connection
         render ShowQueryView { .. }
 
@@ -195,3 +190,6 @@ parseValues False True text = text
 parseValues True True text = text
 
 updateValues list = map (\elem -> fst elem <> " = " <> snd elem) list
+
+isQuery sql = T.isInfixOf "SELECT" u
+    where u = T.toUpper sql

IHP/IDE/Data/View/EditValue.hs

@@ -1,4 +1,3 @@
-
 module IHP.IDE.Data.View.EditValue where
 
 import IHP.ViewPrelude