Project

General

Profile

« Previous | Next » 

Revision 2792

Added by Aaron Marcuse-Kubitza over 12 years ago

sql.py: DbConn._db(): Setting search_path: Use esc_value() instead of params

View differences:

lib/sql.py
198 198 
            if schemas != None:
199 199 
                schemas_ = ''.join((esc_name(self, s)+', '
200 200 
                    for s in schemas.split(',')))
201 
                self.run_query("SELECT set_config('search_path', \
202 
%s || current_setting('search_path'), false)", [schemas_], log_level=3)
201 
                self.run_query("SELECT set_config('search_path', "
202 
                    +self.esc_value(schemas_)
203 
                    +" || current_setting('search_path'), false)", log_level=3)
203 204
204 205 
        return self.__db
205 206

Also available in: Unified diff