Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-12-01 06:10:10 +01:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
rdadmin/edit_pypad.cpp
View File

@@ -2,7 +2,7 @@
//
// Edit a PyPAD Instance Configuration
//
// (C) Copyright 2018-2019 Fred Gleason <fredg@paravelsystems.com>
// (C) Copyright 2018-2021 Fred Gleason <fredg@paravelsystems.com>
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License version 2 as
@@ -77,11 +77,11 @@ EditPypad::EditPypad(int id,QWidget *parent)
// Load Values
//
QString sql=QString("select ")+
"SCRIPT_PATH,"+ // 00
"DESCRIPTION,"+ // 01
"CONFIG "+ // 02
"from PYPAD_INSTANCES where "+
QString().sprintf("ID=%u",edit_id);
"`SCRIPT_PATH`,"+ // 00
"`DESCRIPTION`,"+ // 01
"`CONFIG` "+ // 02
"from `PYPAD_INSTANCES` where "+
QString().sprintf("`ID`=%u",edit_id);
RDSqlQuery *q=new RDSqlQuery(sql);
if(q->first()) {
edit_script_path_edit->setText(q->value(0).toString());
@@ -107,10 +107,10 @@ QSizePolicy EditPypad::sizePolicy() const
void EditPypad::okData()
{
QString sql=QString("update PYPAD_INSTANCES set ")+
"DESCRIPTION=\""+RDEscapeString(edit_description_edit->text())+"\","+
"CONFIG=\""+RDEscapeString(edit_config_text->toPlainText())+"\" where "+
QString().sprintf("ID=%u",edit_id);
QString sql=QString("update `PYPAD_INSTANCES` set ")+
"`DESCRIPTION`='"+RDEscapeString(edit_description_edit->text())+"',"+
"`CONFIG`='"+RDEscapeString(edit_config_text->toPlainText())+"' where "+
QString().sprintf("`ID`=%u",edit_id);
RDSqlQuery::apply(sql);
done(true);