HoHD/PR-Helper
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: escape 'key' as reserved word in all MySQL queries with backticks

Browse Source
This commit is contained in:
wonder
2026-06-20 23:21:24 +08:00
parent 99fb89c60d
commit 735126ff56
7 changed files with 22 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
handlers/pages.go
+3 -3
View File
@@ -55,8 +55,8 @@ func (h *PageHandler) Review(c *gin.Context) {
topN := "20"
concurrency := "5"
if user != nil {
h.db.QueryRow(`SELECT value FROM user_settings WHERE user_id = ? AND key = 'review.top_n'`, user.ID).Scan(&topN)
h.db.QueryRow(`SELECT value FROM user_settings WHERE user_id = ? AND key = 'review.concurrency'`, user.ID).Scan(&concurrency)
h.db.QueryRow("SELECT value FROM user_settings WHERE user_id = ? AND `key` = 'review.top_n'", user.ID).Scan(&topN)
h.db.QueryRow("SELECT value FROM user_settings WHERE user_id = ? AND `key` = 'review.concurrency'", user.ID).Scan(&concurrency)
}
if topN == "" {
topN = "20"
@@ -78,7 +78,7 @@ func (h *PageHandler) Settings(c *gin.Context) {
settings[key] = ""
}
if user != nil {
rows, err := h.db.Query(`SELECT key, value FROM user_settings WHERE user_id = ?`, user.ID)
rows, err := h.db.Query("SELECT `key`, value FROM user_settings WHERE user_id = ?", user.ID)
if err == nil {
defer rows.Close()
for rows.Next() {