Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-10-18 16:41:18 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-19 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdcatch/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdcatch/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 19:29:47 -04:00
parent d7f395561e
commit 5f2dc2a7a1
12 changed files with 330 additions and 323 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
rdcatch/deckmon.cpp
View File

@@ -282,7 +282,8 @@ void DeckMon::SetCutInfo(int id,const QString &cutname)
mon_cut_label->setText("");
return;
}
sql=QString().sprintf("select DESCRIPTION from RECORDINGS where ID=%d",id);
sql=QString("select `DESCRIPTION` from `RECORDINGS` where ")+
QString().sprintf("`ID`=%d",id);
q=new RDSqlQuery(sql);
if(!q->first()) {
if(cutname.isEmpty()) {
@@ -290,11 +291,11 @@ void DeckMon::SetCutInfo(int id,const QString &cutname)
}
else {
sql=QString("select ")+
"CART.TITLE,"+ // 00
"CUTS.DESCRIPTION "+ // 01
"from CART left join CUTS "+
"on CART.NUMBER=CUTS.CART_NUMBER where "+
"CUTS.CUT_NAME=\""+RDEscapeString(cutname)+"\"";
"`CART`.`TITLE`,"+ // 00
"`CUTS`.`DESCRIPTION` "+ // 01
"from `CART` left join `CUTS` "+
"on `CART`.`NUMBER`=`CUTS`.`CART_NUMBER` where "+
"`CUTS`.`CUT_NAME`='"+RDEscapeString(cutname)+"'";
q1=new RDSqlQuery(sql);
if(q1->first()) {
mon_cut_label->