080a160c7b9595d516c9c70e83689a09b60839d0
galt
  Mon Jun 3 12:16:53 2013 -0700
fix SQL Injection
diff --git src/hg/qa/timePosTable.c src/hg/qa/timePosTable.c
index 0c1c34e..82f7cd4 100644
--- src/hg/qa/timePosTable.c
+++ src/hg/qa/timePosTable.c
@@ -132,31 +132,31 @@
 
 static double timePass(int pass, struct sqlConnection *conn, char *table,
                        int size, struct chromSize *chroms)
 /* one time pass for the given size */
 {
 struct chromRange *ranges = buildRanges(size, chroms);
 long startTime = clock1000();
 struct chromRange *range;
 for (range = ranges; range != NULL; range = range->next)
     queryRange(conn, table, range);
 
 double elapsed = ((double)(clock1000()-startTime))/1000.0;
 printf("pass: %d  range size: %d  ranges: %d  time: %g seconds\n", pass, size,
        slCount(ranges), elapsed);
 slFreeList(&ranges);
-sqlUpdate(conn, "flush tables");
+sqlUpdate(conn, "NOSQLINJ flush tables");
 return elapsed;
 }
 
 static void timePosTableIter(char *db, char *table, int minSize, int maxSize,
                              int sizeMult,  int iter, struct chromSize *chroms)
 /* run one iteration of test */
 {
 struct sqlConnection *conn = sqlConnect(db);
 double totalTime = 0.0;
 int sz;
 int pass = 0;
 for (sz = minSize; sz <= maxSize; sz *= sizeMult, pass++)
     totalTime += timePass(pass, conn, table, sz, chroms);
 printf("iteration: %d  passes: %d  time: %g seconds\n", iter, pass,
        totalTime);