afffac65ec2d51d24a2c0d779e3c44e41760f1ab galt Fri May 27 10:21:32 2022 -0700 minor fix for NOSQLINJv2. needed to use sql safe functions. diff --git src/hg/hgTracks/simpleTracks.c src/hg/hgTracks/simpleTracks.c index 607475f..3767683 100644 --- src/hg/hgTracks/simpleTracks.c +++ src/hg/hgTracks/simpleTracks.c @@ -5255,31 +5255,31 @@ char *table = tg->track; struct sqlConnection *conn = hAllocConn(database); struct sqlResult *sr = NULL; char **row; int rowOffset; struct linkedFeaturesSeries *lfsList = NULL, *lfs; char optionScoreStr[256]; /* Option - score filter */ // Special case where getScoreFilterClause is too much trouble safef(optionScoreStr, sizeof(optionScoreStr), "%s.%s", table,SCORE_FILTER); // Special case where CloserToHome not appropriate int optionScore = cartUsualInt(cart, optionScoreStr, 0); if (optionScore > 0) { char extraWhere[128]; - safef(extraWhere, sizeof(extraWhere), "score >= %d", optionScore); + sqlSafef(extraWhere, sizeof(extraWhere), "score >= %d", optionScore); sr = hOrderedRangeQuery(conn, table, chromName, start, end, extraWhere, &rowOffset); } else { sr = hOrderedRangeQuery(conn, table, chromName, start, end, NULL, &rowOffset); } char *pslTable = trackDbSetting(tg->tdb, "lfPslTable"); while ((row = sqlNextRow(sr)) != NULL) { struct lfs *lfsbed = lfsLoad(row+rowOffset); lfs = lfsFromBed(lfsbed, pslTable); slAddHead(&lfsList, lfs);