2021-04-19 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdlibrary/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdlibrary/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 20:11:16 -04:00
parent 220ead0ccd
commit ad56584012
8 changed files with 124 additions and 125 deletions

View File

@@ -312,8 +312,8 @@ void AudioCart::deleteCutData()
// Check for RDCatch Events
//
for(int i=0;i<cutnames.size();i++) {
QString sql=QString("select CUT_NAME from RECORDINGS where ")+
"CUT_NAME=\""+RDEscapeString(cutnames.at(i))+"\"";
QString sql=QString("select `CUT_NAME` from `RECORDINGS` where ")+
"`CUT_NAME`='"+RDEscapeString(cutnames.at(i))+"'";
RDSqlQuery *q=new RDSqlQuery(sql);
if(q->first()) {
if(QMessageBox::warning(this,tr("RDCatch Event Exists"),