0031257: Prevent sql injection in SimpleQueryBuilder

diff --git a/src/org/openbravo/mobile/core/process/SimpleQueryBuilder.java b/src/org/openbravo/mobile/core/process/SimpleQueryBuilder.java
--- a/src/org/openbravo/mobile/core/process/SimpleQueryBuilder.java
+++ b/src/org/openbravo/mobile/core/process/SimpleQueryBuilder.java
@@ -52,6 +52,8 @@
   private Map<String, Object> paramValues;
   private final Logger log4j = Logger.getLogger(SimpleQueryBuilder.class);
 
+  protected int parameterCounter = 0;
+
   public enum Operator {
     equals, //
     notEquals, //
@@ -291,9 +293,8 @@
 
   }
 
-  private static abstract class FiltersPartBuilder implements PartBuilder {
+  private abstract class FiltersPartBuilder implements PartBuilder {
 
-    protected int numValue;
     private Map<String, Object> paramValues;
     private final Logger log4j = Logger.getLogger(FiltersPartBuilder.class);
 
@@ -303,8 +304,8 @@
 
     public void fillParamValues(String operatorName, Object value) {
       if (!operatorName.equals("")) {
-        this.paramValues.put(operatorName + this.numValue, value);
-        this.numValue++;
+        this.paramValues.put(operatorName + parameterCounter, value);
+        parameterCounter++;
       }
     }
 
@@ -312,10 +313,6 @@
     public String getPart() {
       return null;
     }
-
-    public int getnumValue() {
-      return this.numValue;
-    }
   }
 
   private class FiltersCriteria extends FiltersPartBuilder {
@@ -419,7 +416,7 @@
           if (columns.length() != 0) {
             filterQuery += " (";
             for (int j = 0; j < columns.length(); j++) {
-              operatorValue = operatorValueStart + operatorValueName + getnumValue()
+              operatorValue = operatorValueStart + operatorValueName + parameterCounter
                   + operatorValueFinal;
               fillParamValues(operatorValueName, value);
               if ((objFilter.has("isId") && objFilter.getBoolean("isId"))
@@ -444,7 +441,7 @@
 
             filterQuery += ") ";
           } else {
-            operatorValue = operatorValueStart + operatorValueName + getnumValue()
+            operatorValue = operatorValueStart + operatorValueName + parameterCounter
                 + operatorValueFinal;
             filterQuery += operatorValue;
             fillParamValues(operatorValueName, value);
@@ -554,7 +551,7 @@
             }
             newHqlFilter = newHqlFilter.replace("'$" + (i + 1) + "'", "$" + (i + 1));
             newHqlFilter = newHqlFilter.replace("$" + (i + 1), ":" + operatorValueName
-                + this.numValue);
+                + parameterCounter);
             fillParamValues(operatorValueName, paramsArray.get(i));
 
           }