Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-10-18 08:31:16 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-18 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdadmin/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdadmin/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-18 21:23:19 -04:00
parent 0fd02861f9
commit 6264ec3235
67 changed files with 841 additions and 939 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
rdadmin/list_users.cpp
View File

@@ -20,7 +20,7 @@
#include <math.h>
#include <qmessagebox.h>
#include <QMessageBox>
#include <rdcart.h>
#include <rdescape_string.h>
@@ -168,9 +168,9 @@ void ListUsers::deleteData()
// Check for default user assignments
//
sql=QString("select ")+
"NAME "+ // 00
"from STATIONS where "+
"DEFAULT_NAME=\""+RDEscapeString(username)+"\"";
"`NAME` "+ // 00
"from `STATIONS` where "+
"`DEFAULT_NAME`='"+RDEscapeString(username)+"'";
q=new RDSqlQuery(sql);
if(q->first()) {
str=tr("This user is set as the default user for the following hosts:\n\n");
@@ -195,29 +195,29 @@ void ListUsers::deleteData()
//
// Delete RSS Feed Perms
//
sql=QString("delete from FEED_PERMS where ")+
"USER_NAME=\""+RDEscapeString(username)+"\"";
sql=QString("delete from `FEED_PERMS` where ")+
"`USER_NAME`='"+RDEscapeString(username)+"'";
RDSqlQuery::apply(sql);
//
// Delete Member User Perms
//
sql=QString("delete from USER_PERMS where ")+
"USER_NAME=\""+RDEscapeString(username)+"\"";
sql=QString("delete from `USER_PERMS` where ")+
"`USER_NAME`='"+RDEscapeString(username)+"'";
RDSqlQuery::apply(sql);
//
// Delete from User List
//
sql=QString("delete from USERS where ")+
"LOGIN_NAME=\""+RDEscapeString(username)+"\"";
sql=QString("delete from `USERS` where ")+
"`LOGIN_NAME`='"+RDEscapeString(username)+"'";
RDSqlQuery::apply(sql);
//
// Delete from Cached Web Connections
//
sql=QString("delete from WEB_CONNECTIONS where ")+
"LOGIN_NAME=\""+RDEscapeString(username)+"\"";
sql=QString("delete from `WEB_CONNECTIONS` where ")+
"`LOGIN_NAME`='"+RDEscapeString(username)+"'";
RDSqlQuery::apply(sql);
list_users_model->removeUser(username);