Changeset 16218

Timestamp:

2008-06-27T10:22:24+12:00 (15 years ago)

Author:

mdewsnip

Message:

Added a couple of missing sqlite_safe() calls.

File:

• gsdl/trunk/src/lib/sqlitedbclass.cpp (modified) (2 diffs)

gsdl/trunk/src/lib/sqlitedbclass.cpp

@@ -225 +225 @@
   if (metadata_value_filter != "")
   {
-    sql_cmd += " AND value GLOB '" + metadata_value_filter + "'";
+    sql_cmd += " AND value GLOB '" + sqlite_safe(metadata_value_filter) + "'";
   }
 
@@ -254 +254 @@
   if (!exists(key))
   {
-    text_t sql_cmd = "INSERT INTO data (key, value) VALUES ('" + key + "', '" + data + "')";
+    text_t sql_cmd = "INSERT INTO data (key, value) VALUES ('" + sqlite_safe(key) + "', '" + sqlite_safe(data) + "')";
     return sqlexec(sql_cmd);
   }