Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-10-17 16:11:12 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
rdadmin/edit_hostvar.cpp
View File

@@ -114,11 +114,11 @@ int EditHostvar::exec(int id)
edit_id=id;
QString sql=QString("select ")+
"NAME,"+ // 00
"VARVALUE,"+ // 01
"REMARK "+ // 02
"from HOSTVARS where "+
QString().sprintf("ID=%d",id);
"`NAME`,"+ // 00
"`VARVALUE`,"+ // 01
"`REMARK` "+ // 02
"from `HOSTVARS` where "+
QString().sprintf("`ID`=%d",id);
RDSqlQuery *q=new RDSqlQuery(sql);
if(q->first()) {
edit_name_edit->setText(q->value(0).toString());
@@ -133,11 +133,11 @@ int EditHostvar::exec(int id)
void EditHostvar::okData()
{
QString sql=QString("update HOSTVARS set ")+
"NAME=\""+RDEscapeString(edit_name_edit->text())+"\","+
"VARVALUE=\""+RDEscapeString(edit_varvalue_edit->text())+"\","+
"REMARK=\""+RDEscapeString(edit_remark_edit->text())+"\" "+
QString().sprintf("where ID=%d",edit_id);
QString sql=QString("update `HOSTVARS` set ")+
"`NAME`='"+RDEscapeString(edit_name_edit->text())+"',"+
"`VARVALUE`='"+RDEscapeString(edit_varvalue_edit->text())+"',"+
"`REMARK`='"+RDEscapeString(edit_remark_edit->text())+"' "+
QString().sprintf("where `ID`=%d",edit_id);
RDSqlQuery::apply(sql);
done(true);