amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-07-05 08:34:30 +00:00
Code Issues Projects Releases Wiki Activity

Monotone-Parent: c4d0ee7e69c541a6b4b799dae55d03d6b5b67a6a

Browse Source 
Monotone-Revision: effc0ea5c248c71e6b7996a01b73ce09b7609780

Monotone-Author: wsourdeau@inverse.ca
Monotone-Date: 2008-06-30T15:15:29
Monotone-Branch: ca.inverse.sogo
This commit is contained in:
Wolfgang Sourdeau
2008-06-30 15:15:29 +00:00
parent d0c53ef1ac
commit f50e9b4d0f
1 changed files with 28 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SOPE/GDLContentStore/GCSFolderManager.m
+28 -29
View File
@@ -710,42 +710,41 @@ static NSCharacterSet *asciiAlphaNumericCS = nil;
while ([paths count] < 5)
[paths addObject: @"NULL"];
tableName = [self baseTableNameWithUID: [paths objectAtIndex: 2]];
aContext = [channel adaptorContext];
[aContext beginTransaction];
error = [channel createGCSFolderTableWithName: tableName];
tableName = [self baseTableNameWithUID: [paths objectAtIndex: 2]];
quickTableName = [tableName stringByAppendingString: @"_quick"];
aclTableName = [tableName stringByAppendingString: @"_acl"];
// TBD: fix SQL injection issues
baseURL
= [[folderInfoLocation absoluteString] stringByDeletingLastPathComponent];
sql = [NSString stringWithFormat: @"INSERT INTO %@"
@" (c_path, c_path1, c_path2, c_path3, c_path4,"
@" c_foldername, c_location, c_quick_location,"
@" c_acl_location, c_folder_type)"
@" VALUES ('%@', '%@', '%@', '%@', '%@', '%@', '%@/%@',"
@" '%@/%@', '%@/%@', '%@')",
[self folderInfoTableName], path,
[paths objectAtIndex: 1], [paths objectAtIndex: 2],
[paths objectAtIndex: 3], [paths objectAtIndex: 4],
[folderName stringByReplacingString: @"'" withString: @"''"],
baseURL, tableName,
baseURL, quickTableName,
baseURL, aclTableName,
folderType];
error = [channel evaluateExpressionX: sql];
if (!error)
{
quickTableName = [tableName stringByAppendingString: @"_quick"];
sql = [ftype sqlQuickCreateWithTableName: quickTableName];
error = [channel evaluateExpressionX: sql];
error = [channel createGCSFolderTableWithName: tableName];
if (!error)
{
aclTableName = [tableName stringByAppendingString: @"_acl"];
error = [channel createGCSFolderACLTableWithName: aclTableName];
sql = [ftype sqlQuickCreateWithTableName: quickTableName];
error = [channel evaluateExpressionX: sql];
if (!error)
{
// TBD: fix SQL injection issues
baseURL
= [[folderInfoLocation absoluteString] stringByDeletingLastPathComponent];
sql = [NSString stringWithFormat: @"INSERT INTO %@"
@" (c_path, c_path1, c_path2, c_path3, c_path4,"
@" c_foldername, c_location, c_quick_location,"
@" c_acl_location, c_folder_type)"
@" VALUES ('%@', '%@', '%@', '%@', '%@', '%@', '%@/%@',"
@" '%@/%@', '%@/%@', '%@')",
[self folderInfoTableName], path,
[paths objectAtIndex: 1], [paths objectAtIndex: 2],
[paths objectAtIndex: 3], [paths objectAtIndex: 4],
[folderName stringByReplacingString: @"'" withString: @"''"],
baseURL, tableName,
baseURL, quickTableName,
baseURL, aclTableName,
folderType];
error = [channel evaluateExpressionX: sql];
}
error = [channel createGCSFolderACLTableWithName: aclTableName];
}
}