#2191: Bind parameters in the order they appear in the SQL statement

NCI-Agency · Apr 19, 2021 · 5743893 · 5743893
1 parent 074762a
commit 5743893
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/main/java/mil/dds/anet/database/PositionDao.java b/src/main/java/mil/dds/anet/database/PositionDao.java
@@ -233,8 +233,9 @@ public int setPersonInPosition(String personUuid, String positionUuid) {
           .createUpdate("/* positionSetPerson.remove1 */ UPDATE positions "
               + "SET \"currentPersonUuid\" = NULL, type = :type, \"updatedAt\" = :updatedAt "
               + "WHERE \"currentPersonUuid\" = :personUuid")
-          .bind("personUuid", personUuid).bind("type", DaoUtils.getEnumId(revokePrivilege(currPos)))
-          .bind("updatedAt", DaoUtils.asLocalDateTime(now)).execute();
+          .bind("type", DaoUtils.getEnumId(revokePrivilege(currPos)))
+          .bind("updatedAt", DaoUtils.asLocalDateTime(now)).bind("personUuid", personUuid)
+          .execute();
 
       getDbHandle()
           .createUpdate("/* positionSetPerson.remove2 */ INSERT INTO \"peoplePositions\" "