2021-04-20 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'ripcd/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'ripcd/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-20 09:20:54 -04:00
parent efd3920bb5
commit 65b6c9e671
14 changed files with 279 additions and 298 deletions

View File

@@ -41,13 +41,13 @@ Unity4000::Unity4000(RDMatrix *matrix,QObject *parent)
// Load Feed Data
//
sql=QString("select ")+
"NUMBER,"+ // 00
"FEED_NAME,"+ // 01
"CHANNEL_MODE "+ // 02
"from INPUTS where "+
"STATION_NAME=\""+RDEscapeString(rda->station()->name())+"\" && "+
QString().sprintf("MATRIX=%d ",matrix->matrix())+
"order by NUMBER";
"`NUMBER`,"+ // 00
"`FEED_NAME`,"+ // 01
"`CHANNEL_MODE` "+ // 02
"from `INPUTS` where "+
"`STATION_NAME`='"+RDEscapeString(rda->station()->name())+"' && "+
QString().sprintf("`MATRIX`=%d ",matrix->matrix())+
"order by `NUMBER`";
q=new RDSqlQuery(sql);
q->first();
for(int i=0;i<unity_inputs;i++) {