Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-10-11 17:13:47 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
rdadmin/list_replicator_carts.cpp
View File

@@ -108,10 +108,10 @@ void ListReplicatorCarts::repostData()
if(rows.size()==0) {
return;
}
QString sql=QString("update REPL_CART_STATE set ")+
"REPOST=\"Y\" where ";
QString sql=QString("update `REPL_CART_STATE` set ")+
"`REPOST`='Y' where ";
for(int i=0;i<rows.size();i++) {
sql+=QString().sprintf("(ID=%u)||",list_model->cartId(rows.at(i)));
sql+=QString().sprintf("(`ID`=%u)||",list_model->cartId(rows.at(i)));
}
sql=sql.left(sql.length()-2);
RDSqlQuery::apply(sql);
@@ -120,9 +120,9 @@ void ListReplicatorCarts::repostData()
void ListReplicatorCarts::repostAllData()
{
QString sql=QString("update REPL_CART_STATE set ")+
"REPOST=\"Y\" where "+
"REPLICATOR_NAME=\""+RDEscapeString(list_model->replicatorName())+"\"";
QString sql=QString("update `REPL_CART_STATE` set ")+
"`REPOST`='Y' where "+
"`REPLICATOR_NAME`='"+RDEscapeString(list_model->replicatorName())+"'";
RDSqlQuery::apply(sql);
}