Simple content restriction was not validated when it is in further reference.
[mono.git] / mcs / class / Mainsoft.Web / Mainsoft.Web.Security / DerbyApplicationsHelper.cs
index 3c3e89db1350b202f7f82e97dc0b297e7d8388ff..0c43a572d565a0e29dfe237ab85e69fe6ada4fc4 100644 (file)
@@ -53,7 +53,7 @@ namespace Mainsoft.Web.Security
                        string insertQuery = "INSERT INTO aspnet_Applications (ApplicationId, ApplicationName, LoweredApplicationName) VALUES  (?, ?, ?)";\r
 \r
                        OleDbCommand selectCmd = new OleDbCommand (selectQuery, (OleDbConnection) connection);\r
-                       AddParameter (selectCmd, "LoweredApplicationName", applicationName.ToLower ());\r
+                       AddParameter (selectCmd, "LoweredApplicationName", applicationName.ToLowerInvariant ());\r
 \r
                        using (OleDbDataReader reader = selectCmd.ExecuteReader ()) {\r
                                if (reader.Read ())\r
@@ -64,7 +64,7 @@ namespace Mainsoft.Web.Security
                        OleDbCommand insertCmd = new OleDbCommand (insertQuery, (OleDbConnection) connection);\r
                        AddParameter (insertCmd, "ApplicationId", applicationId);\r
                        AddParameter (insertCmd, "ApplicationName", applicationName);\r
-                       AddParameter (insertCmd, "LoweredApplicationName", applicationName.ToLower ());\r
+                       AddParameter (insertCmd, "LoweredApplicationName", applicationName.ToLowerInvariant ());\r
                        insertCmd.ExecuteNonQuery ();\r
 \r
                        return applicationId;\r
@@ -75,7 +75,7 @@ namespace Mainsoft.Web.Security
                        string selectQuery = "SELECT ApplicationId FROM aspnet_Applications WHERE LoweredApplicationName = ?";\r
 \r
                        OleDbCommand selectCmd = new OleDbCommand (selectQuery, (OleDbConnection) connection);\r
-                       AddParameter (selectCmd, "LoweredApplicationName", applicationName.ToLower ());\r
+                       AddParameter (selectCmd, "LoweredApplicationName", applicationName.ToLowerInvariant ());\r
                        using (OleDbDataReader reader = selectCmd.ExecuteReader ()) {\r
                                if (reader.Read ())\r
                                        return reader.GetString (0);\r