2021-04-19 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdcatchd/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdcatchd/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 19:51:47 -04:00
parent 5f2dc2a7a1
commit 220ead0ccd
5 changed files with 183 additions and 188 deletions

View File

@@ -146,7 +146,7 @@ void MainObject::RunBatch(RDCmdSwitch *cmd)
//
// Load Event
//
QString sql=LoadEventSql()+QString().sprintf(" where ID=%d",id);
QString sql=LoadEventSql()+QString().sprintf(" where `ID`=%d",id);
RDSqlQuery *q=new RDSqlQuery(sql);
if(!q->first()) {
delete q;