Skip to content

Commit d1f71dc

Browse files
committed
Update SQL call to use params rather than RAW SQL string
1 parent 829a6ef commit d1f71dc

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/Umbraco.Community.Sustainability/Services/PageMetricService.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ public async Task<AveragePageMetrics> GetAverageMetrics()
6464
public async Task<IEnumerable<PageMetric>> GetPageMetrics(Guid pageKey)
6565
{
6666
using var scope = _scopeProvider.CreateScope();
67-
var queryResults = await scope.Database.FetchAsync<PageMetric>($"SELECT * FROM {PageMetric.TableName} WHERE NodeKey = {pageKey}");
67+
var queryResults = await scope.Database.FetchAsync<PageMetric>("WHERE NodeKey = @0", args: [pageKey]);
6868
scope.Complete();
6969

7070
return queryResults;

0 commit comments

Comments
 (0)