GOLD-238 fix: sql injection when recordTxStatus feature is on

[kgmyatthu]

No description provided.

[github-actions]

PR Reviewer Guide 🔍

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 No relevant tests

🔒 Security concerns Sensitive information exposure: The hardcoded passphrase and secret key in the configuration file (lines 164-165) should be managed securely, not stored in the source code. This exposes sensitive information which could be exploited if accessed by unauthorized users.

⚡ Key issues to review Security Concern The comments on lines 149 and 163 indicate that recordTxStatus and statLog are not safe for production. This should be addressed or clarified why these features are included if they are known to be unsafe. SQL Injection Mitigation The implementation on lines 5-12 uses a regular expression to validate IP addresses to prevent SQL injection. However, the effectiveness and security of this approach should be reviewed to ensure it is robust against all forms of SQL injection.

[afostr]

looks great, thanks