Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2026-01-15 17:11:33 +01:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
rdadmin/list_reports.cpp
View File

@@ -183,16 +183,16 @@ void ListReports::DeleteReport(QString rptname)
QString sql;
RDSqlQuery *q;
sql=QString("delete from REPORTS where ")+
"NAME=\""+RDEscapeString(rptname)+"\"";
sql=QString("delete from `REPORTS` where ")+
"`NAME`='"+RDEscapeString(rptname)+"'";
q=new RDSqlQuery(sql);
delete q;
sql=QString("delete from REPORT_SERVICES where ")+
"REPORT_NAME=\""+RDEscapeString(rptname)+"\"";
sql=QString("delete from `REPORT_SERVICES` where ")+
"`REPORT_NAME`='"+RDEscapeString(rptname)+"'";
q=new RDSqlQuery(sql);
delete q;
sql=QString("delete from REPORT_STATIONS where ")+
"REPORT_NAME=\""+RDEscapeString(rptname)+"\"";
sql=QString("delete from `REPORT_STATIONS` where ")+
"`REPORT_NAME`='"+RDEscapeString(rptname)+"'";
q=new RDSqlQuery(sql);
delete q;
}
@@ -205,7 +205,7 @@ void ListReports::RefreshList(QString rptname)
int count=0;
list_box->clear();
q=new RDSqlQuery("select NAME from REPORTS");
q=new RDSqlQuery("select `NAME` from `REPORTS`");
while (q->next()) {
list_box->insertItem(list_box->count(),q->value(0).toString());
if(rptname==q->value(0).toString()) {