Safety first!

git-svn-id: https://samskivert.googlecode.com/svn/trunk@1354 6335cc39-0255-0410-8fd6-9bcaacd3b74c
This commit is contained in:
mdb
2003-12-15 23:12:47 +00:00
parent fa344463a2
commit 519c1b45f4
@@ -1,5 +1,5 @@
// //
// $Id: UserRepository.java,v 1.36 2003/11/13 02:33:33 ray Exp $ // $Id: UserRepository.java,v 1.37 2003/12/15 23:12:47 mdb Exp $
// //
// samskivert library - useful routines for java programs // samskivert library - useful routines for java programs
// Copyright (C) 2001 Michael Bayne // Copyright (C) 2001 Michael Bayne
@@ -44,6 +44,7 @@ import com.samskivert.jdbc.jora.FieldMask;
import com.samskivert.jdbc.jora.Session; import com.samskivert.jdbc.jora.Session;
import com.samskivert.jdbc.jora.Table; import com.samskivert.jdbc.jora.Table;
import com.samskivert.util.HashIntMap; import com.samskivert.util.HashIntMap;
import com.samskivert.util.StringUtil;
import com.samskivert.servlet.SiteIdentifier; import com.samskivert.servlet.SiteIdentifier;
@@ -192,6 +193,7 @@ public class UserRepository extends JORARepository
public User loadUser (String username) public User loadUser (String username)
throws PersistenceException throws PersistenceException
{ {
username = StringUtil.replace(username, "'", "\\'");
return loadUserWhere("where username = '" + username + "'"); return loadUserWhere("where username = '" + username + "'");
} }