Use query params for user strings
This commit is contained in:
@ -212,9 +212,9 @@ public class MRBService : IMRBService {
|
||||
StringBuilder queryBuilder = new();
|
||||
queryBuilder.Append("select (u.FirstName + ' ' + u.LastName) as OriginatorName, m.* ");
|
||||
queryBuilder.Append("from MRB m join Users u on m.OriginatorID = u.UserID ");
|
||||
queryBuilder.Append($"where m.Title = '{title}'");
|
||||
queryBuilder.Append("where m.Title = @Title");
|
||||
|
||||
mrb = (await _dalService.QueryAsync<MRB>(queryBuilder.ToString())).FirstOrDefault();
|
||||
mrb = (await _dalService.QueryAsync<MRB>(queryBuilder.ToString(), new { Title=title })).FirstOrDefault();
|
||||
|
||||
_cache.Set($"mrb{title}", mrb, DateTimeOffset.Now.AddHours(1));
|
||||
}
|
||||
|
Reference in New Issue
Block a user