2021-04-18 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions

View File

@@ -32,8 +32,6 @@
AddStation::AddStation(QString *stationname,QWidget *parent)
: RDDialog(parent)
{
setModal(true);
add_name=stationname;
//
@@ -172,16 +170,15 @@ void AddStation::CloneEncoderValues(const QString &paramname,
RDSqlQuery *q;
RDSqlQuery *q1;
sql=QString("select ")+
sql=QString("select ")+
paramname+" from `ENCODER_"+paramname+"` where "+
QString().sprintf("ENCODER_ID=%d",src_id);
QString().sprintf("`ENCODER_ID`=%d",src_id);
q=new RDSqlQuery(sql);
while(q->next()) {
sql=QString("insert into `ENCODER_")+
paramname+"` set "+paramname+
QString().sprintf("=%d,ENCODER_ID=%d",q->value(0).toInt(),dest_id);
q1=new RDSqlQuery(sql);
delete q1;
QString().sprintf("=%d,`ENCODER_ID`=%d",q->value(0).toInt(),dest_id);
RDSqlQuery::apply(sql);
}
delete q;
}