2021-04-17 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'lib/'.
	* Replaced " with ' delimiters in all SQL literal strings in 'lib/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-17 19:47:05 -04:00
parent 1b7dd5cd7d
commit 0fd02861f9
104 changed files with 4807 additions and 5120 deletions

View File

@@ -56,20 +56,20 @@ bool RDReport::ExportDeltaflex(const QString &filename,const QDate &startdate,
air_fmt="%u";
}
sql=QString("select ")+
"ELR_LINES.LENGTH,"+ // 00
"ELR_LINES.CART_NUMBER,"+ // 01
"ELR_LINES.EVENT_DATETIME,"+ // 02
"ELR_LINES.EVENT_TYPE,"+ // 03
"ELR_LINES.EXT_START_TIME,"+ // 04
"ELR_LINES.EXT_LENGTH,"+ // 05
"ELR_LINES.EXT_DATA,"+ // 06
"ELR_LINES.EXT_EVENT_ID,"+ // 07
"ELR_LINES.EXT_ANNC_TYPE,"+ // 08
"ELR_LINES.TITLE,"+ // 09
"ELR_LINES.EXT_CART_NAME "+ // 10
"from ELR_LINES left join CART "+
"on ELR_LINES.CART_NUMBER=CART.NUMBER where "+
"SERVICE_NAME=\""+RDEscapeString(mixtable)+"\" "+
"`ELR_LINES`.`LENGTH`,"+ // 00
"`ELR_LINES`.`CART_NUMBER`,"+ // 01
"`ELR_LINES`.`EVENT_DATETIME`,"+ // 02
"`ELR_LINES`.`EVENT_TYPE`,"+ // 03
"`ELR_LINES`.`EXT_START_TIME`,"+ // 04
"`ELR_LINES`.`EXT_LENGTH`,"+ // 05
"`ELR_LINES`.`EXT_DATA`,"+ // 06
"`ELR_LINES`.`EXT_EVENT_ID`,"+ // 07
"`ELR_LINES`.`EXT_ANNC_TYPE`,"+ // 08
"`ELR_LINES`.`TITLE`,"+ // 09
"`ELR_LINES`.`EXT_CART_NAME` "+ // 10
"from `ELR_LINES` left join `CART` "+
"on `ELR_LINES`.`CART_NUMBER`=`CART`.`NUMBER` where "+
"`ELR_LINES`.`SERVICE_NAME`=`"+RDEscapeString(mixtable)+"` "+
"order by EVENT_DATETIME";
q=new RDSqlQuery(sql);