Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0040570
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] StoreServermajorhave not tried2019-04-10 11:232019-06-24 10:55
ReportershuehnerView Statuspublic 
Assigned Tojarmendariz 
PrioritynormalResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revision08d0a7b376ca
ProjectionnoneETAnoneTarget VersionRR19Q3
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned ToAugustoMauch
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0040570: MobileServercontroller.isThereACentralServerDefined is not using bind-parameters

DescriptionThis code is not using bind-params:

      OBQuery<MobileServerDefinition> servers = OBDal.getInstance()
          .createQuery(MobileServerDefinition.class,
              "client.id=:clientId and " + MobileServerDefinition.PROPERTY_ACTIVE + "=true and "
                  + MobileServerDefinition.PROPERTY_MOBILESERVERKEY + "!='" + mobileServerKey
                  + "' and " + MobileServerDefinition.PROPERTY_SERVERTYPE + "='"
                  + MobileServerUtils.MAIN_SERVER + "' order by "
                  + MobileServerDefinition.PROPERTY_PRIORITY);

NOTE: Apparently identical query is also present in readCentralServer method in same file without having that bug.
Probably both should be centralized apart of fixing the bug.
Steps To Reproduce-
TagsNo tags attached.
Attached Filespatch file icon issue 40570 source mobilecore.patch [^] (6,163 bytes) 2019-05-16 09:05 [Show Content]

- Relationships Relation Graph ] Dependency Graph ]
blocks design defect 0038136 acknowledgedTriage Platform Base Openbravo ERP Tracking issue: Find & Fix queries not using bind-params but embedding values into query string 

-  Notes
(0112938)
hgbot (developer)
2019-06-21 13:18

Repository: erp/pmods/org.openbravo.mobile.core
Changeset: 08d0a7b376ca2af9499af50031b895fda20a2b68
Author: Javier Armendáriz <javier.armendariz <at> openbravo.com>
Date: Fri Jun 21 11:26:32 2019 +0200
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/08d0a7b376ca2af9499af50031b895fda20a2b68 [^]

Fixed issue 40570: OBQuery in MobileServerController not using bind params.

Refactored MobileServerController to group a duplicated query into a single
method and modified it to use bind parameters insteads of appending them to
the query string directly.

---
M src/org/openbravo/mobile/core/servercontroller/MobileServerController.java
---
(0112967)
AugustoMauch (manager)
2019-06-24 10:55

Code reviewed and verified

- Issue History
Date Modified Username Field Change
2019-04-10 11:23 shuehner New Issue
2019-04-10 11:23 shuehner Assigned To => StoreServer
2019-04-10 11:23 shuehner Triggers an Emergency Pack => No
2019-04-10 11:23 shuehner Relationship added blocks 0038136
2019-05-13 12:44 shuehner Target Version => RR19Q3
2019-05-13 15:02 ranjith_qualiantech_com Assigned To StoreServer => ranjith_qualiantech_com
2019-05-14 11:06 ranjith_qualiantech_com Status new => scheduled
2019-05-15 13:28 marvintm Assigned To ranjith_qualiantech_com => AugustoMauch
2019-05-16 09:05 ranjith_qualiantech_com File Added: issue 40570 source mobilecore.patch
2019-06-21 09:48 jarmendariz Assigned To AugustoMauch => jarmendariz
2019-06-21 13:18 hgbot Checkin
2019-06-21 13:18 hgbot Note Added: 0112938
2019-06-21 13:18 hgbot Status scheduled => resolved
2019-06-21 13:18 hgbot Resolution open => fixed
2019-06-21 13:18 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/08d0a7b376ca2af9499af50031b895fda20a2b68 [^]
2019-06-21 13:24 jarmendariz Review Assigned To => AugustoMauch
2019-06-24 10:55 AugustoMauch Note Added: 0112967
2019-06-24 10:55 AugustoMauch Status resolved => closed


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker