BrickTracker/bricktracker/sql/wish/delete/wish.sql

12 lines
382 B
MySQL
Raw Normal View History

2025-02-04 20:07:15 +01:00
-- A bit unsafe as it does not use a prepared statement but it
-- should not be possible to inject anything through the {{ set }} context
BEGIN TRANSACTION;
DELETE FROM "bricktracker_wishes"
2025-02-04 20:07:15 +01:00
WHERE "bricktracker_wishes"."set" IS NOT DISTINCT FROM '{{ set }}';
DELETE FROM "bricktracker_wish_owners"
WHERE "bricktracker_wish_owners"."set" IS NOT DISTINCT FROM '{{ set }}';
COMMIT;