Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0040772Openbravo ERP07. Sales managementpublic2019-04-09 20:292019-05-08 12:46
shuehner 
nonofrancisco 
normalminorhave not tried
closedfixed 
5
 
3.0PR19Q23.0PR19Q2 
Sandrahuguet
Core
No
0040772: SL_TaxCategory_Org.execute is not using bind-parameters
This method is not using bind-parameters in lines 49 + 58

      whereClause = "as tn where tn.node = '" + organization.getId() + "' and tn.client.id = '"
          + organization.getClient().getId() + "'";

        OBQuery<TreeNode> query = OBDal.getInstance().createQuery(TreeNode.class, whereClause);
-
No tags attached.
blocks defect 0040559 closed nonofrancisco SL_TaxCategory_Org.execute is not using bind-parameters 
Issue History
2019-05-04 16:55nonofranciscoTypedefect => backport
2019-05-04 16:55nonofranciscoTarget Version => 3.0PR19Q2
2019-05-08 12:46hgbotCheckin
2019-05-08 12:46hgbotNote Added: 0111571
2019-05-08 12:46hgbotStatusscheduled => resolved
2019-05-08 12:46hgbotResolutionopen => fixed
2019-05-08 12:46hgbotFixed in SCM revision => http://code.openbravo.com/erp/backports/3.0PR19Q2/rev/5b358f1d263fdea6b752ad6fcb32e3466aa8ffdf [^]
2019-05-08 12:46SandrahuguetReview Assigned To => Sandrahuguet
2019-05-08 12:46SandrahuguetNote Added: 0111572
2019-05-08 12:46SandrahuguetStatusresolved => closed
2019-05-08 12:46SandrahuguetFixed in Version => 3.0PR19Q2

Notes
(0111571)
hgbot   
2019-05-08 12:46   
Repository: erp/backports/3.0PR19Q2
Changeset: 5b358f1d263fdea6b752ad6fcb32e3466aa8ffdf
Author: Nono Carballo <nonofce <at> gmail.com>
Date: Mon Apr 22 15:04:05 2019 -0400
URL: http://code.openbravo.com/erp/backports/3.0PR19Q2/rev/5b358f1d263fdea6b752ad6fcb32e3466aa8ffdf [^]

Fixes issue 40772: Uses bind parameters in query

Instead of using string concatenation in client and organization filters in
where clause, bind parameters are used

---
M src/org/openbravo/erpCommon/ad_callouts/SL_TaxCategory_Org.java
---
(0111572)
Sandrahuguet   
2019-05-08 12:46   
code review + testing ok