lamassu/lamassu-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: parameterize query

Browse source
This commit is contained in:
siiky 2025-06-02 17:59:01 +01:00
parent 2aea5a523c
commit be06ea5097
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
packages/server/lib/operator.js
View file

@ -2,8 +2,8 @@ const db = require('./db')
const _ = require('lodash/fp') const _ = require('lodash/fp')
function getOperatorId(service) { function getOperatorId(service) {
const sql = `SELECT operator_id FROM operator_ids WHERE service = '${service}'` const sql = 'SELECT operator_id FROM operator_ids WHERE service = ${service}'
return db.oneOrNone(sql).then(_.get('operator_id')) return db.oneOrNone(sql, { service }).then(_.get('operator_id'))
} }
module.exports = { getOperatorId } module.exports = { getOperatorId }