2021-04-18 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions

View File

@@ -636,9 +636,9 @@ void EditStation::okData()
RDSqlQuery *q;
if(!station_maint_box->isChecked()) {
sql=QString("select NAME from STATIONS where ")+
"(NAME!=\""+RDEscapeString(station_station->name())+"\")&&"+
"(SYSTEM_MAINT=\"Y\")";
sql=QString("select `NAME` from `STATIONS` where ")+
"(`NAME`!='"+RDEscapeString(station_station->name())+"')&&"+
"(`SYSTEM_MAINT`='Y')";
q=new RDSqlQuery(sql);
if(!q->first()) {
QMessageBox::warning(this,tr("System Maintenance"),