From b81f4113fcad1c76f5392b94d1ba9ad761233626 Mon Sep 17 00:00:00 2001 From: elizabeth Date: Sun, 7 Aug 2005 21:54:57 +0000 Subject: [PATCH] fixed missing call to JDBCUtil.escape git-svn-id: https://samskivert.googlecode.com/svn/trunk@1689 6335cc39-0255-0410-8fd6-9bcaacd3b74c --- .../java/com/samskivert/servlet/user/UserRepository.java | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java b/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java index c6ef5dd2..169c71f1 100644 --- a/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java +++ b/projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java @@ -176,8 +176,8 @@ public class UserRepository extends JORARepository public User loadUser (String username) throws PersistenceException { - username = StringUtil.replace(username, "'", "\\'"); - return loadUserWhere("where username = '" + username + "'"); + return loadUserWhere("where username = " + + JDBCUtil.escape(username)); } /** @@ -269,8 +269,8 @@ public class UserRepository extends JORARepository public ArrayList lookupUsersByEmail (String email) throws PersistenceException { - final String where = "where email = '" + - StringUtil.replace(email, "'", "\\'") + "'"; + final String where = "where email = " + + JDBCUtil.escape(email); return (ArrayList) execute(new Operation() { public Object invoke (Connection conn, DatabaseLiaison liaison) throws PersistenceException, SQLException