mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2025-10-19 00:51:13 +02:00
2021-04-17 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'lib/'. * Replaced " with ' delimiters in all SQL literal strings in 'lib/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -200,13 +200,6 @@ void RDCutDialog::modelResetData()
|
||||
for(int i=0;i<cart_cart_model->columnCount();i++) {
|
||||
cart_cart_view->resizeColumnToContents(i);
|
||||
}
|
||||
|
||||
/*
|
||||
if(cart_cutname!=NULL) {
|
||||
QModelIndex index=cart_cart_model->cutRow(*cart_cutname);
|
||||
cart_cart_view->selectRow(index.row());
|
||||
}
|
||||
*/
|
||||
}
|
||||
|
||||
|
||||
@@ -247,11 +240,11 @@ void RDCutDialog::addButtonData()
|
||||
delete add_cart;
|
||||
return;
|
||||
}
|
||||
sql=QString("insert into CART set ")+
|
||||
QString().sprintf("NUMBER=%d,",cart_num)+
|
||||
QString().sprintf("TYPE=%d,",cart_type)+
|
||||
"GROUP_NAME=\""+RDEscapeString(cart_group)+"\","+
|
||||
"TITLE=\""+RDEscapeString(cart_title)+"\"";
|
||||
sql=QString("insert into `CART` set ")+
|
||||
QString().sprintf("`NUMBER`=%d,",cart_num)+
|
||||
QString().sprintf("`TYPE`=%d,",cart_type)+
|
||||
"`GROUP_NAME`='"+RDEscapeString(cart_group)+"',"+
|
||||
"`TITLE`='"+RDEscapeString(cart_title)+"'";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
RDCut::create(cart_num,1);
|
||||
|
Reference in New Issue
Block a user