CL-Softwares
/
Nut
8
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: escape field name in INSERT INTO command

This commit is contained in:
Hamed Masafi 2021-07-15 13:18:04 +04:30
parent 62d89d7e22
commit fa9411c514
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/nut/generators/abstractsqlgenerator.cpp
View File

@ -476,9 +476,9 @@ QString AbstractSqlGenerator::insertRecord(Table *t, QString tableName)
values.append(escapeValue(t->property(f.toLatin1().data()))); values.append(escapeValue(t->property(f.toLatin1().data())));
if (changedPropertiesText != QStringLiteral("")) if (changedPropertiesText != QLatin1String(""))
changedPropertiesText.append(QStringLiteral(", ")); changedPropertiesText.append(QStringLiteral(", "));
changedPropertiesText.append(f); changedPropertiesText.append(escaleFieldName(f));
} }
sql = QStringLiteral("INSERT INTO %1 (%2) VALUES (%3)") sql = QStringLiteral("INSERT INTO %1 (%2) VALUES (%3)")
.arg(tableName, changedPropertiesText, values.join(QStringLiteral(", "))); .arg(tableName, changedPropertiesText, values.join(QStringLiteral(", ")));
@ -724,7 +724,7 @@ QString AbstractSqlGenerator::insertCommand(const QString &tableName, const Assi
if (!values.isEmpty()) if (!values.isEmpty())
values.append(QStringLiteral(", ")); values.append(QStringLiteral(", "));
fieldNames.append(QString::fromUtf8(d->left->fieldName)); fieldNames.append(escaleFieldName(QString::fromUtf8(d->left->fieldName)));
values.append(escapeValue(d->operand)); values.append(escapeValue(d->operand));
} }
return QStringLiteral("INSERT INTO %1 (%2) VALUES (%3);") return QStringLiteral("INSERT INTO %1 (%2) VALUES (%3);")