Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-11-30 01:00:18 +01:00
Code Issues Projects Releases Wiki Activity

2021-04-19 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdcatchd/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdcatchd/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 19:51:47 -04:00
parent 5f2dc2a7a1
commit 220ead0ccd
5 changed files with 183 additions and 188 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
rdcatchd/local_macros.cpp
View File

@@ -22,6 +22,7 @@
#include <rdapplication.h>
#include <rdcart.h>
#include <rdescape_string.h>
#include <rduser.h>
#include "rdcatchd.h"
@@ -58,10 +59,10 @@ void MainObject::RunLocalMacros(RDMacro *rml)
if((event_ptr=GetEvent(catch_record_id[decknum]))<
catch_events.size()) {
e=catch_events[event_ptr];
sql=QString("insert into CUT_EVENTS set ")+
"CUT_NAME=\""+e.cutName()+"\","+
QString().sprintf("NUMBER=%u,",eventnum)+
QString().sprintf("POINT=%u",e.startTime().
sql=QString("insert into `CUT_EVENTS` set ")+
"`CUT_NAME`='"+RDEscapeString(e.cutName())+"',"+
QString().sprintf("`NUMBER`=%u,",eventnum)+
QString().sprintf("`POINT`=%u",e.startTime().
msecsTo(QTime::currentTime()));
q=new RDSqlQuery(sql);
delete q;