fix sql queries to use escaped parameters

git-svn-id: file:///root/webif/svn/humax/pkg/src/webif/trunk@339 2a923420-c742-0410-a762-8d5b09965624
This commit is contained in:
hummypkg
2011-09-01 22:20:53 +00:00
parent b7310e9765
commit df85584352
3 changed files with 6 additions and 6 deletions

View File

@@ -119,13 +119,13 @@ rsv method remove_pending {} {
rsv method fix_hsvc {} {
global rsvdb
set _hsvc [$rsvdb query "
set _hsvc [$rsvdb query {
select hSvc
from channel.TBL_SVC
where szSvcName = '$szSvcName'
or szSvcname = '\025$szSvcName'
where szSvcName = '%s'
or szSvcname = '\025%s'
limit 1
"]
} $szSvcName $szSvcName]
if {[llength $_hsvc] == 1} {
set hsvc [lindex [lindex $_hsvc 0] 1]