Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Time slots are now shown dynamically, depending on the date #60

Merged
merged 2 commits into from
Dec 2, 2019

Conversation

nataphilips
Copy link
Collaborator

Relates #48

return databaseConnection.query(
`SELECT booking_time FROM bookings WHERE booking_date='20191203'`
`SELECT booking_time FROM bookings WHERE booking_date='${baseDate}'`
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

risks of sql injection here, use the $1 syntax for psql so like
(SELECT booking_time FROM bookings WHERE booking_date=$1,[someValue])

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed

@Karyum Karyum merged commit 860aa9c into master Dec 2, 2019
@Karyum Karyum deleted the block-dates branch December 2, 2019 08:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants