mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2025-12-05 16:20:14 +01:00
2021-04-19 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'rdlibrary/'. * Replaced " with ' delimiters in all SQL literal strings in 'rdlibrary/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -51,8 +51,8 @@ bool NoteBubble::setCartNumber(unsigned cartnum)
|
||||
|
||||
note_show_timer->stop();
|
||||
hide();
|
||||
QString sql=QString("select NOTES from CART where ")+
|
||||
QString().sprintf("NUMBER=%u",cartnum);
|
||||
QString sql=QString("select `NOTES` from `CART` where ")+
|
||||
QString().sprintf("`NUMBER`=%u",cartnum);
|
||||
RDSqlQuery *q=new RDSqlQuery(sql);
|
||||
if(q->first()&&(!q->value(0).toString().trimmed().isEmpty())) {
|
||||
setText(q->value(0).toString());
|
||||
|
||||
Reference in New Issue
Block a user