Cursor does not find rows in database

[4n6-twister]

Hello all.
I am trying to create my first script for the OLX app.
The problem is that the cursor does not see the rows in the database. I understand that there are columns with JSON, but I will implement this later, and for now the cursor simply does not see the rows, and they are there. I wrote several checks, but they all return 0.

I tried enclosing the column names in both ' and ` but the result is the same.

Can anyone tell me what the problem might be?

OLX_ua.zip

[abrignoni]

The most likely culprit is your query or how are you passing it to the function. Can you share that piece of code?

…

On Sat, Mar 8, 2025, 3:21 PM Vitalii Kolesnyk ***@***.***> wrote: Hello all. I am trying to create my first script for the OLX app. The problem is that the cursor does not see the rows in the database. I understand that there are columns with JSON, but I will implement this later, and for now the cursor simply does not see the rows, and they are there. I wrote several checks, but they all return 0. Can anyone tell me what the problem might be? aleapp.PNG (view on web) <https://github.com/user-attachments/assets/b34600ac-39d8-4024-a82d-c71b402c65b0> ChatListItem.PNG (view on web) <https://github.com/user-attachments/assets/03c6ddfe-beb5-4975-ac9c-ddbfc5ee21ec> OLX_ua.zip <https://github.com/user-attachments/files/19145717/OLX_ua.zip> — Reply to this email directly, view it on GitHub <#544>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AG3DPC6VU6LAIXO73JDMQ2L2TNGLPAVCNFSM6AAAAABYTMQMCCVHI2DSMVQWIX3LMV43ASLTON2WKOZSHEYDIOJZHE4TONQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***> [image: Twi5teR]*Twi5teR* created an issue (abrignoni/ALEAPP#544) <#544> Hello all. I am trying to create my first script for the OLX app. The problem is that the cursor does not see the rows in the database. I understand that there are columns with JSON, but I will implement this later, and for now the cursor simply does not see the rows, and they are there. I wrote several checks, but they all return 0. Can anyone tell me what the problem might be? aleapp.PNG (view on web) <https://github.com/user-attachments/assets/b34600ac-39d8-4024-a82d-c71b402c65b0> ChatListItem.PNG (view on web) <https://github.com/user-attachments/assets/03c6ddfe-beb5-4975-ac9c-ddbfc5ee21ec> OLX_ua.zip <https://github.com/user-attachments/files/19145717/OLX_ua.zip> — Reply to this email directly, view it on GitHub <#544>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AG3DPC6VU6LAIXO73JDMQ2L2TNGLPAVCNFSM6AAAAABYTMQMCCVHI2DSMVQWIX3LMV43ASLTON2WKOZSHEYDIOJZHE4TONQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[4n6-twister]

Can you share that piece of code?

I have attached everything in the archive

[abrignoni]

I don't have my computer with me now in order to view the archive. Will try later if I can.

…

On Sat, Mar 8, 2025, 4:02 PM Vitalii Kolesnyk ***@***.***> wrote: Can you share that piece of code? I have attached everything in the archive — Reply to this email directly, view it on GitHub <#544 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AG3DPC6YDB3NI2HQJ6WLOXT2TNLF7AVCNFSM6AAAAABYTMQMCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMBYGQ4DMMZUGA> . You are receiving this because you commented.Message ID: ***@***.***> [image: Twi5teR]*Twi5teR* left a comment (abrignoni/ALEAPP#544) <#544 (comment)> Can you share that piece of code? I have attached everything in the archive — Reply to this email directly, view it on GitHub <#544 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AG3DPC6YDB3NI2HQJ6WLOXT2TNLF7AVCNFSM6AAAAABYTMQMCCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDOMBYGQ4DMMZUGA> . You are receiving this because you commented.Message ID: ***@***.***>

[Johann-PLW]

Hello @Twi5teR.

Thank you for attaching the zip file.
The problem is not with your query.
I suppose that the content of all the records you provided in the screenshot are stored in the wal file.
You used FQLite tool which is able to display the content of existing and previously existing records in the database.
If you use an other tool like DB Browser for SQLite, transactions in the wal file are committed to the database and if there are recordings waiting to be deleted, there are not available anymore in this tool and therefore with SQLite3 Python module.

[4n6-twister]

I suppose that the content of all the records you provided in the screenshot are stored in the wal file

Thanks for the tip, I checked and realized that these forensic programs really do get records not from the database itself, but from its WAL file.

Is it possible to teach ALEAPP to take data from WAL, are there any code examples?

[JamesHabben]

Hi @Twi5teR,
ALEAPP is capable of using these records, we just have to include the sidecar files in the search pattern. When the artifact provides the search pattern, we then go find the files that match and extract them to the output folder. Then we hand off processing to each of the artifacts to do their processing. We need this step since many extractions are contained in zip or tar files, and their internal contents are not directly accessible by the artifacts.

Right now, your pattern only looks for the primary db file and doesn't include any sidecars.

"paths": ('*/ua.slando/databases/ChatSellingDb.db',),

You can make a small change to the pattern to tell ALEAPP to also include the sidecars. Note the * symbol below. With this, you will get the records as expected.

"paths": ('*/ua.slando/databases/ChatSellingDb.db*',),