2021-04-19 Fred Gleason <fredg@paravelsystems.com>

* Escaped all SQL identifiers in 'rdlogedit/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdlogedit/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason
2021-04-19 20:17:18 -04:00
parent ad56584012
commit c45cc83e15
4 changed files with 21 additions and 27 deletions

View File

@@ -446,19 +446,19 @@ void MainWidget::reportData()
// Report Body
//
sql=QString("select ")+
"NAME,"+ // 00
"DESCRIPTION,"+ // 01
"SERVICE,"+ // 02
"MUSIC_LINKS,"+ // 03
"MUSIC_LINKED,"+ // 04
"TRAFFIC_LINKS,"+ // 05
"TRAFFIC_LINKED,"+ // 06
"COMPLETED_TRACKS,"+ // 07
"SCHEDULED_TRACKS,"+ // 08
"START_DATE,"+ // 09
"END_DATE,"+ // 10
"MODIFIED_DATETIME "+ // 11
"from LOGS order by NAME ";
"`NAME`,"+ // 00
"`DESCRIPTION`,"+ // 01
"`SERVICE`,"+ // 02
"`MUSIC_LINKS`,"+ // 03
"`MUSIC_LINKED`,"+ // 04
"`TRAFFIC_LINKS`,"+ // 05
"`TRAFFIC_LINKED`,"+ // 06
"`COMPLETED_TRACKS`,"+ // 07
"`SCHEDULED_TRACKS`,"+ // 08
"`START_DATE`,"+ // 09
"`END_DATE`,"+ // 10
"`MODIFIED_DATETIME` "+ // 11
"from `LOGS` order by `NAME` ";
q=new RDSqlQuery(sql);
while(q->next()) {
//