Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-10-17 16:11:12 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
rdadmin/add_report.cpp
View File

@@ -33,8 +33,6 @@
AddReport::AddReport(QString *rptname,QWidget *parent)
: RDDialog(parent)
{
setModal(true);
//
// Fix the Window Size
//
@@ -107,8 +105,8 @@ void AddReport::okData()
tr("You must provide a report name!"));
return;
}
sql=QString("select NAME from REPORTS where ")+
"NAME=\""+RDEscapeString(add_name_edit->text())+"\"";
sql=QString("select `NAME` from `REPORTS` where ")+
"`NAME`='"+RDEscapeString(add_name_edit->text())+"'";
q=new RDSqlQuery(sql);
if(q->first()) {
QMessageBox::warning(this,tr("Report Exists"),
@@ -117,8 +115,8 @@ void AddReport::okData()
return;
}
delete q;
sql=QString("insert into REPORTS set ")+
"NAME=\""+RDEscapeString(add_name_edit->text())+"\"";
sql=QString("insert into `REPORTS` set ")+
"`NAME`='"+RDEscapeString(add_name_edit->text())+"'";
q=new RDSqlQuery(sql);
delete q;
*add_name=add_name_edit->text();