Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0040581Retail ModulesStoreServerpublic2019-04-10 12:422019-06-24 12:06
Reportershuehner 
Assigned Tojarmendariz 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionRR19Q3Fixed in Version 
Merge Request Status
Review Assigned ToAugustoMauch
OBNetwork customerNo
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0040581: SynchronizedServerProcessCaller.thereIsDataInImportQueue is not using bind-parameters
DescriptionThis code is not using bind-params:

      final String whereClause = ImportEntry.PROPERTY_IMPORTSTATUS + "='" + importStatus + "' and "
          + ImportEntry.PROPERTY_TYPEOFDATA + "='OBMOBC_SynchronizedData' and "
          + ImportEntry.PROPERTY_CREATIONDATE + "<:creationDate and "
          + ImportEntry.PROPERTY_ORGANIZATION + "=:org and id!=:id";
      final Query<Number> qry = OBDal.getInstance()
          .getSession()
          .createQuery("select count(*) from " + ImportEntry.ENTITY_NAME + " where " + whereClause,
              Number.class);
Steps To Reproduce-
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
blocks design defect 0038136 acknowledged Triage Platform Base Openbravo ERP Tracking issue: Find & Fix queries not using bind-params but embedding values into query string 
Attached Filespatch issue 40581 source mobilecore.patch (2,038) 2019-05-16 09:05
https://issues.openbravo.com/file_download.php?file_id=12956&type=bug
Issue History
Date ModifiedUsernameFieldChange
2019-04-10 12:42shuehnerNew Issue
2019-04-10 12:42shuehnerAssigned To => StoreServer
2019-04-10 12:42shuehnerOBNetwork customer => No
2019-04-10 12:42shuehnerTriggers an Emergency Pack => No
2019-04-10 12:42shuehnerRelationship addedblocks 0038136
2019-05-13 12:45shuehnerTarget Version => RR19Q3
2019-05-13 15:02ranjith_qualiantech_comAssigned ToStoreServer => ranjith_qualiantech_com
2019-05-14 11:06ranjith_qualiantech_comStatusnew => scheduled
2019-05-16 08:56ranjith_qualiantech_comAssigned Toranjith_qualiantech_com => AugustoMauch
2019-05-16 09:05ranjith_qualiantech_comFile Added: issue 40581 source mobilecore.patch
2019-06-21 11:34jarmendarizAssigned ToAugustoMauch => jarmendariz
2019-06-21 13:18hgbotCheckin
2019-06-21 13:18hgbotNote Added: 0112940
2019-06-21 13:18hgbotStatusscheduled => resolved
2019-06-21 13:18hgbotResolutionopen => fixed
2019-06-21 13:18hgbotFixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/f1e3435ad7eb15c41ab268328d1991b2467327eb [^]
2019-06-21 13:18hgbotCheckin
2019-06-21 13:18hgbotNote Added: 0112941
2019-06-21 13:18hgbotFixed in SCM revisionhttp://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/f1e3435ad7eb15c41ab268328d1991b2467327eb [^] => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/254b693f17e39f4c9be29a2af989bff0f7c5304f [^]
2019-06-21 13:22jarmendarizNote Deleted: 0112941
2019-06-21 13:23jarmendarizReview Assigned To => AugustoMauch
2019-06-24 12:06AugustoMauchNote Added: 0112971
2019-06-24 12:06AugustoMauchStatusresolved => closed

Notes
(0112940)
hgbot   
2019-06-21 13:18   
Repository: erp/pmods/org.openbravo.mobile.core
Changeset: f1e3435ad7eb15c41ab268328d1991b2467327eb
Author: Javier Armendáriz <javier.armendariz <at> openbravo.com>
Date: Fri Jun 21 13:06:32 2019 +0200
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/f1e3435ad7eb15c41ab268328d1991b2467327eb [^]

Fixed issue 40581:Query in SynchronizedServerProcessCaller not using bind-params

Refactored SynchronizedServerProcessCaller query to use bind parameters instead
of appending them to the query string directly.

---
M src/org/openbravo/mobile/core/servercontroller/SynchronizedServerProcessCaller.java
---
(0112971)
AugustoMauch   
2019-06-24 12:06   
Code reviewed and verified