From dfc125bfa8247bbc54a9e4a424459e89c982824c Mon Sep 17 00:00:00 2001 From: mdb Date: Wed, 6 Dec 2006 20:59:39 +0000 Subject: [PATCH] That'll need to be escaped and quoted. git-svn-id: https://samskivert.googlecode.com/svn/trunk@1991 6335cc39-0255-0410-8fd6-9bcaacd3b74c --- src/java/com/samskivert/servlet/user/UserRepository.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/java/com/samskivert/servlet/user/UserRepository.java b/src/java/com/samskivert/servlet/user/UserRepository.java index 93e25859..0ff5b12d 100644 --- a/src/java/com/samskivert/servlet/user/UserRepository.java +++ b/src/java/com/samskivert/servlet/user/UserRepository.java @@ -325,7 +325,7 @@ public class UserRepository extends JORARepository // attempt to update an existing session row, returning true if we found and updated it return (update("update sessions set expires = '" + expires + "' " + - "where sessionId = " + sessionKey) == 1); + "where sessionId = " + JDBCUtil.escape(sessionKey)) == 1); } /**