2021-04-20 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'ripcd/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'ripcd/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-20 09:20:54 -04:00
parent efd3920bb5
commit 65b6c9e671
14 changed files with 279 additions and 298 deletions

View File

@@ -181,15 +181,13 @@ void LiveWireLwrpGpio::gpoChangedData(unsigned id,unsigned slot,unsigned line,
void LiveWireLwrpGpio::connectedData(unsigned id)
{
QString sql;
RDSqlQuery *q;
sql=QString().sprintf("update MATRICES set GPIS=%u,GPOS=%u ",
sql=QString().sprintf("update `MATRICES` set `GPIS`=%u,`GPOS`=%u ",
RD_LIVEWIRE_GPIO_BUNDLE_SIZE*gpio_livewire->gpis(),
RD_LIVEWIRE_GPIO_BUNDLE_SIZE*gpio_livewire->gpos())+
"where (STATION_NAME=\""+RDEscapeString(stationName())+"\")&&"+
QString().sprintf("(MATRIX=%u)",matrixNumber());
q=new RDSqlQuery(sql);
delete q;
"where (`STATION_NAME`='"+RDEscapeString(stationName())+"')&&"+
QString().sprintf("(`MATRIX`=%u)",matrixNumber());
RDSqlQuery::apply(sql);
for(int i=0;i<RD_LIVEWIRE_GPIO_BUNDLE_SIZE*gpio_livewire->gpis();i++) {
insertGpioEntry(false,i+1);