From adb8caf002be44dc5ade1110c46d25816b110c40 Mon Sep 17 00:00:00 2001 From: Joseph Makara Date: Sat, 27 Mar 2021 20:01:47 +0300 Subject: [PATCH] Use prepared statements instead of string concatenated SQL everywhere - WIP (FINERACT-854) --- .../service/ProvisioningEntriesReadPlatformServiceImpl.java | 1 - 1 file changed, 1 deletion(-) diff --git a/fineract-provider/src/main/java/org/apache/fineract/accounting/provisioning/service/ProvisioningEntriesReadPlatformServiceImpl.java b/fineract-provider/src/main/java/org/apache/fineract/accounting/provisioning/service/ProvisioningEntriesReadPlatformServiceImpl.java index 2d19a6855..5396bfc9b 100644 --- a/fineract-provider/src/main/java/org/apache/fineract/accounting/provisioning/service/ProvisioningEntriesReadPlatformServiceImpl.java +++ b/fineract-provider/src/main/java/org/apache/fineract/accounting/provisioning/service/ProvisioningEntriesReadPlatformServiceImpl.java @@ -57,7 +57,6 @@ public class ProvisioningEntriesReadPlatformServiceImpl implements ProvisioningE @Override public Collection retrieveLoanProductsProvisioningData(Date date) { String formattedDate = new SimpleDateFormat("yyyy-MM-dd").format(date); - formattedDate = "'" + formattedDate + "'"; LoanProductProvisioningEntryMapper mapper = new LoanProductProvisioningEntryMapper(); final String sql = mapper.schema(); return this.jdbcTemplate.query(sql, mapper, new Object[] { formattedDate, formattedDate, formattedDate });