0040832: SequenceProductCreate.getLineNum is not using bind-parameters

Description

This code is not using bind-params:

    String hql = " SELECT COALESCE(MAX(l.lineNo),0)+10 AS DefaultValue FROM ManufacturingOperationProduct l WHERE l.mASequence.id= '"
        + SequenceId + "'";
    Query<Long> q = OBDal.getInstance().getSession().createQuery(hql, Long.class);

Steps To Reproduce

Tags

No tags attached.

Attached Files

Relationships [ Relation Graph ] [ Dependency Graph ]

blocks

defect

0040574

3.0PR19Q3

closed

nonofrancisco

SequenceProductCreate.getLineNum is not using bind-parameters

Notes
(0112426) hgbot (developer) 2019-06-05 15:53	Repository: erp/backports/3.0PR19Q2.1 Changeset: 785a223ac67f4cb4144410f9185f243831b4510c Author: Nono Carballo <nonofce <at> gmail.com> Date: Wed May 01 22:53:24 2019 -0400 URL: http://code.openbravo.com/erp/backports/3.0PR19Q2.1/rev/785a223ac67f4cb4144410f9185f243831b4510c [^] Fixes issue 40832: Uses bind parameter. Instead of string concatenation, bind parameter is used to build the query. --- M src/org/openbravo/erpCommon/ad_actionButton/SequenceProductCreate.java ---

(0112428) Sandrahuguet (viewer) 2019-06-05 15:54	code review + testing ok

Issue History
Date Modified	Username	Field	Change
2019-05-09 23:25	nonofrancisco	Type	defect => backport
2019-05-09 23:25	nonofrancisco	Target Version	=> 3.0PR19Q2
2019-05-10 08:12	Sandrahuguet	Target Version	3.0PR19Q2 => 3.0PR19Q2.1
2019-06-05 15:53	hgbot	Checkin
2019-06-05 15:53	hgbot	Note Added: 0112426
2019-06-05 15:53	hgbot	Status	scheduled => resolved
2019-06-05 15:53	hgbot	Resolution	open => fixed
2019-06-05 15:53	hgbot	Fixed in SCM revision	=> http://code.openbravo.com/erp/backports/3.0PR19Q2.1/rev/785a223ac67f4cb4144410f9185f243831b4510c [^]
2019-06-05 15:54	Sandrahuguet	Review Assigned To	=> Sandrahuguet
2019-06-05 15:54	Sandrahuguet	Note Added: 0112428
2019-06-05 15:54	Sandrahuguet	Status	resolved => closed
2019-06-05 15:54	Sandrahuguet	Fixed in Version	=> 3.0PR19Q2.1