Autres/Rivendellaudio
1
0
Fork 0
mirror of https://github.com/ElvishArtisan/rivendell.git synced 2025-05-19 06:32:34 +02:00
Code Issues Projects Releases Wiki Activity

2021-04-19 Fred Gleason <fredg@paravelsystems.com>

Browse Source 
* Escaped all SQL identifiers in 'rdcastmanager/'.
	* Replaced " with ' delimiters in all SQL literal strings in
	'rdcastmanager/'.

Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
Fred Gleason 2021-04-19 18:51:01 -04:00
parent c53d4c9858
commit d7f395561e
2 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ChangeLog
View File

@ -21491,3 +21491,7 @@
* Escaped all SQL identifiers in 'rdcartslots/'.
* Replaced " with ' delimiters in all SQL literal strings in
'rdcartslots/'.
2021-04-19 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'rdcastmanager/'.
* Replaced " with ' delimiters in all SQL literal strings in
'rdcastmanager/'.

8
rdcastmanager/list_casts.cpp
View File

@ -349,14 +349,14 @@ void ListCasts::deleteData()
}
pd->setValue(1);
qApp->processEvents();
sql=QString("delete from PODCASTS where ")+
QString().sprintf("ID=%u",cast_id);
sql=QString("delete from `PODCASTS` where ")+
QString().sprintf("`ID`=%u",cast_id);
RDSqlQuery::apply(sql);
sql=QString("update FEEDS set ")+
sql=QString("update `FEEDS` set ")+
"LAST_BUILD_DATETIME=now() "+
"where "+
QString().sprintf("ID=%u",list_feed_id);
QString().sprintf("`ID`=%u",list_feed_id);
RDSqlQuery::apply(sql);
if(!list_feed->postXml()) {