diff --git a/Interfaces/ActiveDirectoryInterface/SyncUsers.MSSQL.vb b/Interfaces/ActiveDirectoryInterface/SyncUsers.MSSQL.vb index 72f27164..d266761d 100644 --- a/Interfaces/ActiveDirectoryInterface/SyncUsers.MSSQL.vb +++ b/Interfaces/ActiveDirectoryInterface/SyncUsers.MSSQL.vb @@ -198,10 +198,10 @@ Namespace SyncUsers _logger.Debug("UserId of User [{0}] is [{1}]", User, oUserId) If oUserId = 0 Then - Dim oPrename = User.GivenName.EscapeForSQL() - Dim oSurname = User.Surname.EscapeForSQL() - Dim oUsername = User.samAccountName.EscapeForSQL() - Dim oEmail = User.Email.EscapeForSQL() + Dim oPrename = User.GivenName + Dim oSurname = User.Surname + Dim oUsername = User.samAccountName + Dim oEmail = User.Email Dim oSQL As String = $"INSERT INTO TBDD_USER (PRENAME, NAME, USERNAME, EMAIL, ADDED_WHO) VALUES ('{oPrename}', '{oSurname}', UPPER('{oUsername}'), '{oEmail}', '{ADDED_WHO}')" Dim oResult = _mssql.ExecuteNonQuery(oSQL) @@ -237,9 +237,9 @@ Namespace SyncUsers Dim oUserId As Integer = GetUserId(User.samAccountName) If Not IsNothing(oUserId) Then If oUserId > 0 Then - Dim oPrename = User.GivenName.EscapeForSQL() - Dim oSurname = User.Surname.EscapeForSQL() - Dim oEmail = User.Email.EscapeForSQL() + Dim oPrename = User.GivenName + Dim oSurname = User.Surname + Dim oEmail = User.Email Dim oSQL As String = $"UPDATE TBDD_USER SET PRENAME = '{oPrename}', NAME = '{oSurname}', EMAIL = '{oEmail}', CHANGED_WHO = '{ADDED_WHO}' WHERE GUID = {oUserId}" Dim oResult = _mssql.ExecuteNonQuery(oSQL)