mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2025-10-21 14:02:58 +02:00
2021-04-18 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'rdadmin/'. * Replaced " with ' delimiters in all SQL literal strings in 'rdadmin/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -140,12 +140,12 @@ void ListPypads::addData()
|
||||
}
|
||||
delete file;
|
||||
|
||||
QString sql=QString("insert into PYPAD_INSTANCES set ")+
|
||||
"STATION_NAME=\""+RDEscapeString(list_station->name())+"\","+
|
||||
"SCRIPT_PATH=\""+RDEscapeString(script)+"\","+
|
||||
"DESCRIPTION=\""+
|
||||
RDEscapeString("new "+script.split("/").last()+" instance")+"\","+
|
||||
"CONFIG=\""+RDEscapeString(exemplar)+"\"";
|
||||
QString sql=QString("insert into `PYPAD_INSTANCES` set ")+
|
||||
"`STATION_NAME`='"+RDEscapeString(list_station->name())+"',"+
|
||||
"`SCRIPT_PATH`='"+RDEscapeString(script)+"',"+
|
||||
"`DESCRIPTION`='"+
|
||||
RDEscapeString("new "+script.split("/").last()+" instance")+"',"+
|
||||
"`CONFIG`='"+RDEscapeString(exemplar)+"'";
|
||||
int id=RDSqlQuery::run(sql).toInt();
|
||||
EditPypad *d=new EditPypad(id,this);
|
||||
if(d->exec()) {
|
||||
@@ -158,8 +158,8 @@ void ListPypads::addData()
|
||||
rda->ripc()->sendNotification(notify);
|
||||
}
|
||||
else {
|
||||
sql=QString("delete from PYPAD_INSTANCES where ")+
|
||||
QString().sprintf("ID=%u",id);
|
||||
sql=QString("delete from `PYPAD_INSTANCES` where ")+
|
||||
QString().sprintf("`ID`=%u",id);
|
||||
RDSqlQuery::apply(sql);
|
||||
}
|
||||
delete d;
|
||||
@@ -200,8 +200,8 @@ void ListPypads::deleteData()
|
||||
QMessageBox::No) {
|
||||
return;
|
||||
}
|
||||
sql=QString("delete from PYPAD_INSTANCES where ")+
|
||||
QString().sprintf("ID=%d",id);
|
||||
sql=QString("delete from `PYPAD_INSTANCES` where ")+
|
||||
QString().sprintf("`ID`=%d",id);
|
||||
RDSqlQuery::apply(sql);
|
||||
list_list_model->removeInstance(id);
|
||||
RDNotification notify=
|
||||
|
Reference in New Issue
Block a user