fix sql queries to use escaped parameters

git-svn-id: file:///root/webif/svn/humax/pkg/src/webif/trunk@339 2a923420-c742-0410-a762-8d5b09965624
2011-09-01 22:20:53 +00:00
parent b7310e9765
commit df85584352
3 changed files with 6 additions and 6 deletions
--- a/var/mongoose/lib/epg.class
+++ b/var/mongoose/lib/epg.class
@@ -136,7 +136,7 @@ epg method get_channel_info {} {
 		set chan [lindex [$channeldb query {
 			select szSvcName, usLcn, aucDefaultAuthority, hsvc
 			from TBL_SVC
-			where usSvcId = %s} $service_id
+			where usSvcId = '%s'} $service_id
 		    ] 0]
 		if {[dict exists $chan usLcn]} {
 			set channel_num $chan(usLcn)