2018-07-12 Fred Gleason <fredg@paravelsystems.com>

* Cleaned up SQL quieries in 'lib/' ensure UTF-8 compatibility.
This commit is contained in:
Fred Gleason
2018-07-12 13:47:20 -04:00
parent bc2ada9b22
commit 363dbb7878
67 changed files with 1617 additions and 2040 deletions

View File

@@ -33,14 +33,14 @@ RDEvent::RDEvent(const QString &name,bool create)
event_name=name;
if(create) {
sql=QString().sprintf("select NAME from EVENTS where \
(NAME=\"%s\")",(const char *)event_name);
sql=QString("select NAME from EVENTS where ")+
"(NAME=\""+RDEscapeString(event_name)+"\")";
q=new RDSqlQuery(sql);
if(q->size()!=1) {
delete q;
sql=QString().
sprintf("INSERT INTO EVENTS SET NAME=\"%s\",TITLE_SEP=100",
(const char *)event_name);
sql=QString("insert into EVENTS set ")+
"NAME=\""+RDEscapeString(event_name)+"\","+
"TITLE_SEP=100";
q=new RDSqlQuery(sql);
delete q;
}
@@ -291,9 +291,8 @@ int RDEvent::GetIntValue(const QString &field) const
RDSqlQuery *q;
int accum;
sql=QString().sprintf("select %s from EVENTS where NAME=\"%s\"",
(const char *)field,
(const char *)event_name);
sql=QString("select ")+field+" from EVENTS where "+
"NAME=\""+RDEscapeString(event_name)+"\"";
q=new RDSqlQuery(sql);
if(q->first()) {
accum=q->value(0).toInt();
@@ -311,9 +310,8 @@ QString RDEvent::GetStringValue(const QString &field,bool *ok) const
RDSqlQuery *q;
QString accum;
sql=QString().sprintf("select %s from EVENTS where NAME=\"%s\"",
(const char *)field,
(const char *)event_name);
sql=QString("select ")+field+" from EVENTS where "+
"NAME=\""+RDEscapeString(event_name)+"\"";
q=new RDSqlQuery(sql);
if(q->first()) {
if(q->value(0).isNull()) {
@@ -336,10 +334,9 @@ void RDEvent::SetRow(const QString &param,int value) const
RDSqlQuery *q;
QString sql;
sql=QString().sprintf("UPDATE EVENTS SET %s=%d WHERE NAME=\"%s\"",
(const char *)param,
value,
(const char *)event_name);
sql=QString("update EVENTS set ")+
param+QString().sprintf("=%d where ",value)+
"NAME=\""+RDEscapeString(event_name)+"\"";
q=new RDSqlQuery(sql);
delete q;
}
@@ -351,15 +348,14 @@ void RDEvent::SetRow(const QString &param,const QString &value,bool ok) const
QString sql;
if(ok) {
sql=QString().sprintf("UPDATE EVENTS SET %s=\"%s\" WHERE NAME=\"%s\"",
(const char *)param,
(const char *)RDEscapeString(value),
(const char *)event_name);
sql=QString("update EVENTS set ")+
param+"=\""+RDEscapeString(value)+"\" where "+
"NAME=\""+RDEscapeString(event_name)+"\"";
}
else {
sql=QString().sprintf("UPDATE EVENTS SET %s=NULL WHERE NAME=\"%s\"",
(const char *)param,
(const char *)event_name);
sql=QString("update EVENTS set ")+
param+"=NULL where "+
"NAME=\""+RDEscapeString(event_name)+"\"";
}
q=new RDSqlQuery(sql);
delete q;