Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-12-01 14:20:11 +01:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
rdadmin/edit_vguest_resource.cpp
View File

@@ -113,13 +113,13 @@ int EditVguestResource::exec(RDMatrix::VguestType type,unsigned id)
edit_id=id;
QString sql=QString("select ")+
"ENGINE_NUM,"+ // 00
"DEVICE_NUM,"+ // 01
"SURFACE_NUM,"+ // 02
"RELAY_NUM,"+ // 03
"BUSS_NUM "+ // 04
"from VGUEST_RESOURCES where "+
QString().sprintf("ID=%u",id);
"`ENGINE_NUM`,"+ // 00
"`DEVICE_NUM`,"+ // 01
"`SURFACE_NUM`,"+ // 02
"`RELAY_NUM`,"+ // 03
"`BUSS_NUM` "+ // 04
"from `VGUEST_RESOURCES` where "+
QString().sprintf("`ID`=%u",id);
RDSqlQuery *q=new RDSqlQuery(sql);
if(q->first()) {
if(q->value(0).toInt()>=0) {
@@ -205,12 +205,12 @@ void EditVguestResource::okData()
return;
}
}
QString sql=QString("update VGUEST_RESOURCES set ")+
QString().sprintf("ENGINE_NUM=%d,",enginenum)+
QString().sprintf("DEVICE_NUM=%d,",devicenum)+
QString().sprintf("SURFACE_NUM=%d,",surfacenum)+
QString().sprintf("RELAY_NUM=%d ",relaynum)+
QString().sprintf("where ID=%u",edit_id);
QString sql=QString("update `VGUEST_RESOURCES` set ")+
QString().sprintf("`ENGINE_NUM`=%d,",enginenum)+
QString().sprintf("`DEVICE_NUM`=%d,",devicenum)+
QString().sprintf("`SURFACE_NUM`=%d,",surfacenum)+
QString().sprintf("`RELAY_NUM`=%d ",relaynum)+
QString().sprintf("where `ID`=%u",edit_id);
RDSqlQuery::apply(sql);
done(true);