Techlord-RCE
diff --git a/‎Provider for MS SQL Server/DbObject.cs‎
Lines changed: 2 additions & 2 deletions b/‎Provider for MS SQL Server/DbObject.cs‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎Samples/DLL/OptimaJet.Workflow.DbPersistence.dll‎
0 Bytes b/‎Samples/DLL/OptimaJet.Workflow.DbPersistence.dll‎
0 Bytes
@@ -103,7 +103,7 @@ public static int Delete(SqlConnection connection, object id, SqlTransaction tra
             var pId = new SqlParameter("p_id", key.Type) {Value = ConvertToDbCompatibilityType(id)};
 
             return ExecuteCommand(connection,
-                string.Format("DELETE FROM {0} WHERE [{1}] = @p_id", ObjectName, key.Name.ToUpper()), transaction, pId);
+                string.Format("DELETE FROM {0} WHERE [{1}] = @p_id", ObjectName, key.Name), transaction, pId);
         }
 
         public static int ExecuteCommand(SqlConnection connection, string commandText, 
@@ -177,7 +177,7 @@ public static T[] Select(SqlConnection connection, string commandText, params Sq
                 {
                     T item = new T();
                     foreach (var c in item.DbColumns)
-                        item.SetValue(c.Name, row[c.Name.ToUpper()]);
+                        item.SetValue(c.Name, row[c.Name]);
                     res.Add(item);
                 }
 #endif
Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,7 @@ public static int Delete(SqlConnection connection, object id, SqlTransaction tra`
`103`	`103`	`var pId = new SqlParameter("p_id", key.Type) {Value = ConvertToDbCompatibilityType(id)};`
`104`	`104`
`105`	`105`	`return ExecuteCommand(connection,`
`106`		`- string.Format("DELETE FROM {0} WHERE [{1}] = @p_id", ObjectName, key.Name.ToUpper()), transaction, pId);`
	`106`	`+ string.Format("DELETE FROM {0} WHERE [{1}] = @p_id", ObjectName, key.Name), transaction, pId);`
`107`	`107`	`}`
`108`	`108`
`109`	`109`	`public static int ExecuteCommand(SqlConnection connection, string commandText,`
`@@ -177,7 +177,7 @@ public static T[] Select(SqlConnection connection, string commandText, params Sq`
`177`	`177`	`{`
`178`	`178`	`T item = new T();`
`179`	`179`	`foreach (var c in item.DbColumns)`
`180`		`- item.SetValue(c.Name, row[c.Name.ToUpper()]);`
	`180`	`+ item.SetValue(c.Name, row[c.Name]);`
`181`	`181`	`res.Add(item);`
`182`	`182`	`}`
`183`	`183`	`#endif`