Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2026-01-13 16:15:51 +01:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
rdadmin/list_hostvars.cpp
View File

@@ -118,9 +118,9 @@ QSizePolicy ListHostvars::sizePolicy() const
void ListHostvars::addData()
{
QString sql=QString("insert into HOSTVARS set ")+
"STATION_NAME=\""+RDEscapeString(list_station)+"\","+
"NAME=\""+RDEscapeString("%NEW_VAR%")+"\"";
QString sql=QString("insert into `HOSTVARS` set ")+
"`STATION_NAME`='"+RDEscapeString(list_station)+"',"+
"`NAME`='"+RDEscapeString("%NEW_VAR%")+"'";
int id=RDSqlQuery::run(sql).toInt();
if(list_edit_hostvar_dialog->exec(id)) {
QModelIndex row=list_model->addVar(id);
@@ -128,8 +128,8 @@ void ListHostvars::addData()
list_view->selectRow(row.row());
}
else {
sql=QString("delete from HOSTVARS ")+
QString().sprintf("where ID=%d",id);
sql=QString("delete from `HOSTVARS` ")+
QString().sprintf("where `ID`=%d",id);
RDSqlQuery::apply(sql);
}
}
@@ -164,8 +164,8 @@ void ListHostvars::deleteData()
QMessageBox::Yes,QMessageBox::No)!=QMessageBox::Yes) {
return;
}
QString sql=QString("delete from HOSTVARS ")+
QString().sprintf("where ID=%d",list_model->varId(rows.first()));
QString sql=QString("delete from `HOSTVARS` ")+
QString().sprintf("where `ID`=%d",list_model->varId(rows.first()));
RDSqlQuery::apply(sql);
list_model->removeVar(rows.first());
}