fix broken validation

Author: 3kh0

app/controllers/api/admin/v1/admin_controller.rb

@@ -248,17 +248,15 @@ def execute
             return render json: { error: "whatcha doin'?" }, status: :unprocessable_entity
           end
 
+          cool = %w[created_at deleted_at]
           not_cool = %w[INSERT UPDATE DELETE DROP CREATE ALTER TRUNCATE EXEC EXECUTE]
-          if not_cool.any? { |keyword| query.upcase.include?(keyword) }
-            return render json: { error: "no perms lmaooo" }, status: :forbidden
-          end
 
-          unless query.strip.upcase.start_with?("SELECT")
+          if not_cool.any? { |keyword| query.upcase.include?(keyword) } &&
+             cool.none? { |field| query.upcase.include?(field.upcase) }
             return render json: { error: "no perms lmaooo" }, status: :forbidden
           end
 
-          cool = %w[created_at deleted_at]
-          if query.upcase.match?(/\b(#{not_cool.join('|')})\b/) && !query.upcase.match?(/\b(#{cool.join('|')})\b/)
+          unless query.strip.upcase.start_with?("SELECT")
             return render json: { error: "no perms lmaooo" }, status: :forbidden
           end