mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2025-10-16 15:41:13 +02:00
2021-04-18 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'rdadmin/'. * Replaced " with ' delimiters in all SQL literal strings in 'rdadmin/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -134,8 +134,8 @@ void RenameGroup::okData()
|
||||
return;
|
||||
}
|
||||
|
||||
sql=QString("select NAME from GROUPS where ")+
|
||||
"NAME=\""+RDEscapeString(group_newname_edit->text())+"\"";
|
||||
sql=QString("select `NAME` from `GROUPS` where ")+
|
||||
"`NAME`='"+RDEscapeString(group_newname_edit->text())+"'";
|
||||
q=new RDSqlQuery(sql);
|
||||
if(q->first()) {
|
||||
if(QMessageBox::question(this,"RDAdmin - "+tr("Group Exists"),
|
||||
@@ -153,88 +153,78 @@ void RenameGroup::okData()
|
||||
//
|
||||
// Update Cart List
|
||||
//
|
||||
sql=QString("update CART set ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `CART` set ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update LogManager Events
|
||||
//
|
||||
sql=QString("update EVENTS set ")+
|
||||
"SCHED_GROUP=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"SCHED_GROUP=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `EVENTS` set ")+
|
||||
"`SCHED_GROUP`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`SCHED_GROUP`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update Replicators
|
||||
//
|
||||
sql=QString("update REPLICATOR_MAP set ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"",
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `REPLICATOR_MAP` set ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update Dropboxes
|
||||
//
|
||||
sql=QString("update DROPBOXES set ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `DROPBOXES` set ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update Group List
|
||||
//
|
||||
if(!merging) {
|
||||
sql=QString("update GROUPS set ")+
|
||||
"NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `GROUPS` set ")+
|
||||
"`NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update AUDIO_PERMS
|
||||
//
|
||||
sql=QString("update AUDIO_PERMS set ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `AUDIO_PERMS` set ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update USER_PERMS
|
||||
//
|
||||
sql=QString("update USER_PERMS set ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_newname_edit->text())+"\" where "+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("update `USER_PERMS` set ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_newname_edit->text())+"' where "+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
}
|
||||
else {
|
||||
sql=QString("delete from GROUPS where ")+
|
||||
"NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("delete from `GROUPS` where ")+
|
||||
"`NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update AUDIO_PERMS
|
||||
//
|
||||
sql=QString("delete from AUDIO_PERMS where ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("delete from `AUDIO_PERMS` where ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
|
||||
//
|
||||
// Update USER_PERMS
|
||||
//
|
||||
sql=QString("delete from USER_PERMS where ")+
|
||||
"GROUP_NAME=\""+RDEscapeString(group_name_edit->text())+"\"";
|
||||
q=new RDSqlQuery(sql);
|
||||
delete q;
|
||||
sql=QString("delete from `USER_PERMS` where ")+
|
||||
"`GROUP_NAME`='"+RDEscapeString(group_name_edit->text())+"'";
|
||||
RDSqlQuery::apply(sql);
|
||||
}
|
||||
|
||||
*group_new_name=group_newname_edit->text();
|
||||
|
Reference in New Issue
Block a user