2021-04-18 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions

View File

@@ -173,25 +173,25 @@ void ListImages::deleteData()
if((row=SelectedRow())>=0) {
sql=QString("select ")+
"ID "+
"from FEEDS where "+
QString().sprintf("CHANNEL_IMAGE_ID=%d",list_model->imageId(row));
"`ID` "+
"from `FEEDS` where "+
QString().sprintf("`CHANNEL_IMAGE_ID`=%d",list_model->imageId(row));
q=new RDSqlQuery(sql);
channel_ids=q->size();
delete q;
sql=QString("select ")+
"ID "+
"from FEEDS where "+
QString().sprintf("DEFAULT_ITEM_IMAGE_ID=%d",list_model->imageId(row));
"`ID` "+
"from `FEEDS` where "+
QString().sprintf("`DEFAULT_ITEM_IMAGE_ID`=%d",list_model->imageId(row));
q=new RDSqlQuery(sql);
channel_default_ids=q->size();
delete q;
sql=QString("select ")+
"ID "+
"from PODCASTS where "+
QString().sprintf("ITEM_IMAGE_ID=%d",list_model->imageId(row));
"`ID` "+
"from `PODCASTS` where "+
QString().sprintf("`ITEM_IMAGE_ID`=%d",list_model->imageId(row));
q=new RDSqlQuery(sql);
item_ids=q->size();
delete q;
@@ -212,8 +212,8 @@ void ListImages::deleteData()
return;
}
sql=QString("select ID from FEED_IMAGES where ")+
QString().sprintf("ID=%d",list_model->imageId(row));
sql=QString("select `ID` from `FEED_IMAGES` where ")+
QString().sprintf("`ID`=%d",list_model->imageId(row));
q=new RDSqlQuery(sql);
if(q->first()) {
if((row=SelectedRow())>=0) {