2021-04-19 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'importers/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'importers/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 18:37:33 -04:00
parent 536e7874dc
commit a1ce33e344
7 changed files with 310 additions and 313 deletions

View File

@@ -154,7 +154,7 @@ MainObject::MainObject(QObject *parent)
//
// Check Database Versions
//
sql=QString("select DB from VERSION");
sql=QString("select `DB` from `VERSION`");
q=new QSqlQuery(sql,src_db);
if(!q->first()) {
fprintf(stderr,
@@ -182,8 +182,8 @@ MainObject::MainObject(QObject *parent)
//
// Check Rivendell Hosts
//
sql=QString("select NAME from STATIONS where ")+
"NAME=\""+RDEscapeString(src_station)+"\"";
sql=QString("select `NAME` from `STATIONS` where ")+
"NAME='"+RDEscapeString(src_station)+"'";
q=new QSqlQuery(sql,src_db);
if(!q->first()) {
fprintf(stderr,
@@ -192,8 +192,8 @@ MainObject::MainObject(QObject *parent)
}
delete q;
sql=QString("select NAME from STATIONS where ")+
"NAME=\""+RDEscapeString(dest_station)+"\"";
sql=QString("select `NAME` from `STATIONS` where ")+
"`NAME`='"+RDEscapeString(dest_station)+"'";
q=new QSqlQuery(sql,dest_db);
if(!q->first()) {
fprintf(stderr,
@@ -217,8 +217,8 @@ MainObject::MainObject(QObject *parent)
//
// Delete current destination entries
//
sql=QString("delete from RECORDINGS where ")+
"STATION_NAME\""+RDEscapeString(dest_station)+"\"";
sql=QString("delete from `RECORDINGS` where ")+
"`STATION_NAME`='"+RDEscapeString(dest_station)+"'";
q=new QSqlQuery(sql,dest_db);
delete q;
@@ -226,94 +226,94 @@ MainObject::MainObject(QObject *parent)
// Copy Entries
//
sql=QString("select ")+
"IS_ACTIVE,"+ // 00
"TYPE,"+ // 01
"CHANNEL,"+ // 02
"CUT_NAME,"+ // 03
"SUN,"+ // 04
"MON,"+ // 05
"TUE,"+ // 06
"WED,"+ // 07
"THU,"+ // 08
"FRI,"+ // 09
"SAT,"+ // 10
"DESCRIPTION,"+ // 11
"START_TYPE,"+ // 12
"START_TIME,"+ // 13
"START_LENGTH,"+ // 14
"START_MATRIX,"+ // 15
"START_LINE,"+ // 16
"START_OFFSET,"+ // 17
"END_TYPE,"+ // 18
"END_TIME,"+ // 19
"END_LENGTH,"+ // 20
"END_MATRIX,"+ // 21
"END_LINE,"+ // 22
"LENGTH,"+ // 23
"TRIM_THRESHOLD,"+ // 24
"NORMALIZE_LEVEL,"+ // 25
"STARTDATE_OFFSET,"+ // 26
"ENDDATE_OFFSET,"+ // 27
"FORMAT,"+ // 28
"CHANNELS,"+ // 29
"SAMPRATE,"+ // 30
"BITRATE,"+ // 31
"QUALITY,"+ // 32
"MACRO_CART,"+ // 33
"SWITCH_INPUT,"+ // 34
"SWITCH_OUTPUT,"+ // 35
"EXIT_CODE,"+ // 36
"ONE_SHOT,"+ // 37
"URL,"+ // 38
"URL_USERNAME,"+ // 39
"URL_PASSWORD "+ // 40
"from RECORDINGS where "+
"STATION_NAME=\""+RDEscapeString(src_station)+"\"";
"`IS_ACTIVE`,"+ // 00
"`TYPE`,"+ // 01
"`CHANNEL`,"+ // 02
"`CUT_NAME`,"+ // 03
"`SUN`,"+ // 04
"`MON`,"+ // 05
"`TUE`,"+ // 06
"`WED`,"+ // 07
"`THU`,"+ // 08
"`FRI`,"+ // 09
"`SAT`,"+ // 10
"`DESCRIPTION`,"+ // 11
"`START_TYPE`,"+ // 12
"`START_TIME`,"+ // 13
"`START_LENGTH`,"+ // 14
"`START_MATRIX`,"+ // 15
"`START_LINE`,"+ // 16
"`START_OFFSET`,"+ // 17
"`END_TYPE`,"+ // 18
"`END_TIME`,"+ // 19
"`END_LENGTH`,"+ // 20
"`END_MATRIX`,"+ // 21
"`END_LINE`,"+ // 22
"`LENGTH`,"+ // 23
"`TRIM_THRESHOLD`,"+ // 24
"`NORMALIZE_LEVEL`,"+ // 25
"`STARTDATE_OFFSET`,"+ // 26
"`ENDDATE_OFFSET`,"+ // 27
"`FORMAT`,"+ // 28
"`CHANNELS`,"+ // 29
"`SAMPRATE`,"+ // 30
"`BITRATE`,"+ // 31
"`QUALITY`,"+ // 32
"`MACRO_CART`,"+ // 33
"`SWITCH_INPUT`,"+ // 34
"`SWITCH_OUTPUT`,"+ // 35
"`EXIT_CODE`,"+ // 36
"`ONE_SHOT`,"+ // 37
"`URL`,"+ // 38
"`URL_USERNAME`,"+ // 39
"`URL_PASSWORD` "+ // 40
"from `RECORDINGS` where "+
"`STATION_NAME`='"+RDEscapeString(src_station)+"'";
q=new QSqlQuery(sql,src_db);
while(q->next()) {
sql=QString("insert into RECORDINGS set ")+
":IS_ACTIVE=\""+RDEscapeString(q->value(0).toString())+"\","+
QString().sprintf("TYPE=%d,",q->value(1).toInt())+
QString().sprintf("CHANNEL=%u,",q->value(2).toUInt())+
"CUT_NAME=\""+RDEscapeString(q->value(3).toString())+"\","+
"SUN=\""+RDEscapeString(q->value(4).toString())+"\","+
"MON=\""+RDEscapeString(q->value(5).toString())+"\","+
"TUE=\""+RDEscapeString(q->value(6).toString())+"\","+
"WED=\""+RDEscapeString(q->value(7).toString())+"\","+
"THU=\""+RDEscapeString(q->value(8).toString())+"\","+
"FRI=\""+RDEscapeString(q->value(9).toString())+"\","+
"SAT=\""+RDEscapeString(q->value(10).toString())+"\","+
"DESCRIPTION=\""+RDEscapeString(q->value(11).toString())+"\","+
QString().sprintf("START_TYPE=%d,",q->value(12).toInt())+
"START_TIME=\""+RDEscapeString(q->value(13).toString())+"\","+
QString().sprintf("START_LENGTH=%d,",q->value(14).toInt())+
QString().sprintf("START_MATRIX=%d,",q->value(15).toInt())+
QString().sprintf("START_LINE=%d,",q->value(16).toInt())+
QString().sprintf("START_OFFSET=%d,",q->value(17).toInt())+
QString().sprintf("END_TYPE=%d,",q->value(18).toInt())+
"END_TIME=\""+RDEscapeString(q->value(19).toString())+"\","+
QString().sprintf("END_LENGTH=%d,",q->value(20).toInt())+
QString().sprintf("END_MATRIX=%d,",q->value(21).toInt())+
QString().sprintf("END_LINE=%d,",q->value(22).toInt())+
QString().sprintf("LENGTH=%u,",q->value(23).toUInt())+
QString().sprintf("TRIM_THRESHOLD=%d,",q->value(24).toInt())+
QString().sprintf("NORMALIZE_LEVEL=%d,",q->value(25).toInt())+
QString().sprintf("STARTDATE_OFFSET=%u,",q->value(26).toUInt())+
QString().sprintf("ENDDATE_OFFSET=%u,",q->value(27).toUInt())+
QString().sprintf("FORMAT=%d,",q->value(28).toInt())+
QString().sprintf("CHANNELS=%d,",q->value(29).toInt())+
QString().sprintf("SAMPRATE=%d,",q->value(30).toInt())+
QString().sprintf("BITRATE=%d,",q->value(31).toInt())+
QString().sprintf("QUALITY=%d,",q->value(32).toInt())+
QString().sprintf("MACRO_CART=%d,",q->value(33).toInt())+
QString().sprintf("SWITCH_INPUT=%d,",q->value(34).toInt())+
QString().sprintf("SWITCH_OUTPUT=%d,",q->value(35).toInt())+
QString().sprintf("EXIT_CODE=%d,",q->value(36).toInt())+
"ONE_SHOT=\""+RDEscapeString(q->value(37).toString())+"\","+
"URL=\""+RDEscapeString(q->value(38).toString())+"\","+
"URL_USERNAME=\""+RDEscapeString(q->value(39).toString())+"\","+
"URL_PASSWORD=\""+RDEscapeString(q->value(40).toString())+"\","+
"STATION_NAME=\""+RDEscapeString(dest_station)+"\"";
sql=QString("insert into `RECORDINGS` set ")+
"`IS_ACTIVE`='"+RDEscapeString(q->value(0).toString())+"',"+
QString().sprintf("`TYPE`=%d,",q->value(1).toInt())+
QString().sprintf("`CHANNEL`=%u,",q->value(2).toUInt())+
"`CUT_NAME`='"+RDEscapeString(q->value(3).toString())+"',"+
"`SUN`='"+RDEscapeString(q->value(4).toString())+"',"+
"`MON`='"+RDEscapeString(q->value(5).toString())+"',"+
"`TUE`='"+RDEscapeString(q->value(6).toString())+"',"+
"`WED`='"+RDEscapeString(q->value(7).toString())+"',"+
"`THU`='"+RDEscapeString(q->value(8).toString())+"',"+
"`FRI`='"+RDEscapeString(q->value(9).toString())+"',"+
"`SAT`='"+RDEscapeString(q->value(10).toString())+"',"+
"`DESCRIPTION`='"+RDEscapeString(q->value(11).toString())+"',"+
QString().sprintf("`START_TYPE`=%d,",q->value(12).toInt())+
"`START_TIME`='"+RDEscapeString(q->value(13).toString())+"',"+
QString().sprintf("`START_LENGTH`=%d,",q->value(14).toInt())+
QString().sprintf("`START_MATRIX`=%d,",q->value(15).toInt())+
QString().sprintf("`START_LINE`=%d,",q->value(16).toInt())+
QString().sprintf("`START_OFFSET`=%d,",q->value(17).toInt())+
QString().sprintf("`END_TYPE`=%d,",q->value(18).toInt())+
"`END_TIME`='"+RDEscapeString(q->value(19).toString())+"',"+
QString().sprintf("`END_LENGTH`=%d,",q->value(20).toInt())+
QString().sprintf("`END_MATRIX`=%d,",q->value(21).toInt())+
QString().sprintf("`END_LINE`=%d,",q->value(22).toInt())+
QString().sprintf("`LENGTH`=%u,",q->value(23).toUInt())+
QString().sprintf("`TRIM_THRESHOLD`=%d,",q->value(24).toInt())+
QString().sprintf("`NORMALIZE_LEVEL`=%d,",q->value(25).toInt())+
QString().sprintf("`STARTDATE_OFFSET`=%u,",q->value(26).toUInt())+
QString().sprintf("`ENDDATE_OFFSET`=%u,",q->value(27).toUInt())+
QString().sprintf("`FORMAT`=%d,",q->value(28).toInt())+
QString().sprintf("`CHANNELS`=%d,",q->value(29).toInt())+
QString().sprintf("`SAMPRATE`=%d,",q->value(30).toInt())+
QString().sprintf("`BITRATE`=%d,",q->value(31).toInt())+
QString().sprintf("`QUALITY`=%d,",q->value(32).toInt())+
QString().sprintf("`MACRO_CART`=%d,",q->value(33).toInt())+
QString().sprintf("`SWITCH_INPUT`=%d,",q->value(34).toInt())+
QString().sprintf("`SWITCH_OUTPUT`=%d,",q->value(35).toInt())+
QString().sprintf("`EXIT_CODE`=%d,",q->value(36).toInt())+
"`ONE_SHOT`='"+RDEscapeString(q->value(37).toString())+"',"+
"`URL`='"+RDEscapeString(q->value(38).toString())+"',"+
"`URL_USERNAME`='"+RDEscapeString(q->value(39).toString())+"',"+
"`URL_PASSWORD`='"+RDEscapeString(q->value(40).toString())+"',"+
"`STATION_NAME`='"+RDEscapeString(dest_station)+"'";
q1=new QSqlQuery(sql,dest_db);
delete q1;
}