|
@@ -107,7 +107,7 @@ client.findById=async function(cid,attributes){
|
|
|
|
|
|
|
|
var staffDetail=[];
|
|
var staffDetail=[];
|
|
|
|
|
|
|
|
- var cid = '20160923 AND 1=1;-- hack';
|
|
|
|
|
|
|
+ //var cid = '20160923 AND 1=1;-- hack';
|
|
|
var sqlQuery = 'SELECT b.* FROM CLD_client_staff as a left join CLD_staff as b on (a.sid=b.sid) where a.cid=?';
|
|
var sqlQuery = 'SELECT b.* FROM CLD_client_staff as a left join CLD_staff as b on (a.sid=b.sid) where a.cid=?';
|
|
|
|
|
|
|
|
sequelize.query(sqlQuery,
|
|
sequelize.query(sqlQuery,
|
