fix sqlite string escaping

This commit is contained in:
zmike 2014-02-09 10:56:28 -05:00
parent 34d1824ad1
commit 33ab763358
1 changed files with 4 additions and 2 deletions

View File

@ -137,14 +137,16 @@ empc_module_metadata_fetch(const Empc_Fetch_Request *req)
if ((!connected) || (req->type != EMPC_METADATA_TYPE_IMAGE)) return EINA_FALSE;
a = strdupa(req->artist);
a = esql_string_escape(0, req->artist);
eina_str_tolower(&a);
snprintf(artist, sizeof(artist), "AND artist_name = '%s'", a);
free(a);
if (req->album)
{
al = strdupa(req->album);
al = esql_string_escape(0, req->album);
eina_str_tolower(&al);
snprintf(album, sizeof(album), "AND album_name = '%s'", al);
free(al);
}
snprintf(buf, sizeof(buf), glyr_query,
req->album ? GLYR_GET_COVERART : GLYR_GET_ARTIST_PHOTOS,