Changed query to accept user input in parameterized query

rudderlabs · Nov 4, 2022 · 8bc8242 · 8bc8242
1 parent 9ac505d
commit 8bc8242
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/warehouse/warehouse.go b/warehouse/warehouse.go
@@ -1836,7 +1836,7 @@ func getPendingStagingFileCount(sourceOrDestId string, isSourceId bool) (fileCou
 		lastStagingFileID,
 		sourceOrDestColumn,
 	)
-	err = dbHandle.QueryRow(sourceOrDestId, sourceOrDestId).Scan(&fileCount)
+	err = dbHandle.QueryRow(sqlStatement, sourceOrDestId).Scan(&fileCount)
 	if err != nil && err != sql.ErrNoRows {
 		err = fmt.Errorf("query: %s run failed with Error : %w", sqlStatement, err)
 		return