mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2026-01-12 23:55:56 +01:00
2021-04-17 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'lib/'. * Replaced " with ' delimiters in all SQL literal strings in 'lib/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -104,19 +104,19 @@ RDAddLog::RDAddLog(QString *logname,QString *svcname,
|
||||
//
|
||||
switch(mode) {
|
||||
case RDLogFilter::NoFilter:
|
||||
sql=QString("select NAME from SERVICES order by NAME");
|
||||
sql=QString("select `NAME` from `SERVICES` order by `NAME`");
|
||||
break;
|
||||
|
||||
case RDLogFilter::UserFilter:
|
||||
sql=QString("select SERVICE_NAME from USER_SERVICE_PERMS where ")+
|
||||
"USER_NAME=\""+RDEscapeString(rda->user()->name())+"\" "+
|
||||
"order by SERVICE_NAME";
|
||||
sql=QString("select `SERVICE_NAME` from `USER_SERVICE_PERMS` where ")+
|
||||
"`USER_NAME`='"+RDEscapeString(rda->user()->name())+"' "+
|
||||
"order by `SERVICE_NAME`";
|
||||
break;
|
||||
|
||||
case RDLogFilter::StationFilter:
|
||||
sql=QString("select SERVICE_NAME from SERVICE_PERMS where ")+
|
||||
"STATION_NAME=\""+RDEscapeString(rda->station()->name())+"\" "+
|
||||
"order by SERVICE_NAME";
|
||||
sql=QString("select `SERVICE_NAME` from `SERVICE_PERMS` where ")+
|
||||
"`STATION_NAME`='"+RDEscapeString(rda->station()->name())+"' "+
|
||||
"order by `SERVICE_NAME`";
|
||||
break;
|
||||
}
|
||||
q=new RDSqlQuery(sql);
|
||||
|
||||
Reference in New Issue
Block a user