Use %Q instead of '%q'

[platform/core/multimedia/libmedia-service.git] / src / media-svc-media.c

diff --git a/src/media-svc-media.c b/src/media-svc-media.c
index 31c2985..ee7a737 100755 (executable)
--- a/src/media-svc-media.c
+++ b/src/media-svc-media.c
@@ -163,7 +163,7 @@ int _media_svc_get_thumbnail_path_by_path(sqlite3 *handle, const char *path, cha
 
        media_svc_retvm_if(!STRING_VALID(path), MS_MEDIA_ERR_INVALID_PARAMETER, "path is NULL");
 
-       sql = sqlite3_mprintf("SELECT media_thumbnail_path FROM %q WHERE media_path='%q'", DB_TABLE_MEDIA, path);
+       sql = sqlite3_mprintf("SELECT media_thumbnail_path FROM %q WHERE media_path=%Q", DB_TABLE_MEDIA, path);
 
        ret = _media_svc_sql_prepare_to_step(handle, sql, &sql_stmt);
 
@@ -208,7 +208,7 @@ int _media_svc_update_item_validity(const char *path, int validity, bool stack_q
 
        media_svc_debug("path=[%s], validity=[%d]", path, validity);
 
-       sql = sqlite3_mprintf("UPDATE %q SET validity=%d WHERE media_path='%q';", DB_TABLE_MEDIA, validity, path);
+       sql = sqlite3_mprintf("UPDATE %q SET validity=%d WHERE media_path=%Q;", DB_TABLE_MEDIA, validity, path);
 
        if (!stack_query) {
                ret = _media_svc_sql_query_direct(sql, uid);
@@ -235,8 +235,7 @@ int _media_svc_update_thumbnail_path(const char *path, const char *thumb_path, u
 int _media_svc_update_item_by_path(const char *src_path, const char *dst_storage_id, const char *dest_path, const char *file_name, int modified_time, long long int folder_id, uid_t uid)
 {
        int ret = MS_MEDIA_ERR_NONE;
-
-       char *query = sqlite3_mprintf("UPDATE %q SET media_path=%Q, media_display_name=%Q, media_modified_time=%d, folder_id=%lld, storage_uuid='%q' WHERE media_path=%Q;",
+       char *query = sqlite3_mprintf("UPDATE %q SET media_path=%Q, media_display_name=%Q, media_modified_time=%d, folder_id=%lld, storage_uuid=%Q WHERE media_path=%Q;",
                                DB_TABLE_MEDIA, dest_path, file_name, modified_time, folder_id, dst_storage_id, src_path);
 
        ret = _media_svc_sql_query(query, uid);