fix(criteria): use query parameters

Signed-off-by: Valeri Sokolov <ulfurinn@ulfurinn.net>
This commit is contained in:
Valeri Sokolov 2026-01-24 10:59:10 +00:00
parent eee260faa8
commit dabda05857
No known key found for this signature in database

View File

@ -260,15 +260,15 @@ func (r *playlistRepository) refreshSmartPlaylist(pls *model.Playlist) bool {
}
sq := Select("row_number() over (order by "+rules.OrderBy()+") as id", "'"+pls.ID+"' as playlist_id", "media_file.id as media_file_id").
From("media_file").LeftJoin("annotation on (" +
"annotation.item_id = media_file.id" +
" AND annotation.item_type = 'media_file'" +
" AND annotation.user_id = '" + usr.ID + "')").
From("media_file").LeftJoin("annotation on ("+
"annotation.item_id = media_file.id"+
" AND annotation.item_type = 'media_file'"+
" AND annotation.user_id = ?)", usr.ID).
LeftJoin("album on (album.id = media_file.album_id)").
LeftJoin("annotation as album_annotation on ("+
"album_annotation.item_id = album.id" +
" AND album_annotation.item_type = 'album'" +
" AND album_annotation.user_id = '" + usr.ID + "')")
"album_annotation.item_id = album.id"+
" AND album_annotation.item_type = 'album'"+
" AND album_annotation.user_id = ?)", usr.ID)
// Only include media files from libraries the user has access to
sq = r.applyLibraryFilter(sq, "media_file")