From 4798977aeae384795e2994f275b491e83e49e917 Mon Sep 17 00:00:00 2001
From: fcki1984 <39592566+fcki1984@users.noreply.github.com>
Date: Fri, 12 May 2023 21:20:20 +0800
Subject: [PATCH] Update PreferenceMapper.php

---
 lib/Db/PreferenceMapper.php | 29 +++++++++++++++--------------
 1 file changed, 15 insertions(+), 14 deletions(-)

diff --git a/lib/Db/PreferenceMapper.php b/lib/Db/PreferenceMapper.php
index 16af9be..3248b96 100644
--- a/lib/Db/PreferenceMapper.php
+++ b/lib/Db/PreferenceMapper.php
@@ -10,6 +10,7 @@
 
 namespace OCA\Epubreader\Db;
 
+use OCP\DB\QueryBuilder\IQueryBuilder;
 use OCA\Epubreader\Utility\Time;
 use OCP\IDBConnection;
 
@@ -29,22 +30,22 @@ class PreferenceMapper extends ReaderMapper {
      * @return array
      */
     public function get($scope, $fileId, $name=null) {
-        if(!empty($name)) {
-            $sql = "SELECT * FROM `*PREFIX*reader_prefs` WHERE `scope`=? AND `file_id`=? AND `user_id`=? AND `name`=?";
-            $args = array(
-                $scope,
-                $fileId,
-                $this->userId,
-                $name);
-        } else {
-            $sql = "SELECT * FROM `*PREFIX*reader_prefs` WHERE `scope`=? AND `file_id`=? AND `user_id`=?";
-            $args = array(
-                $scope,
-                $fileId,
-                $this->userId);
+        $query = $this->db->getQueryBuilder();
+        $query->select('*')
+            ->from($this->getTableName())
+            ->where($query->expr()->eq('scope', $query->createNamedParameter($scope)))
+            ->andWhere($query->expr()->eq('file_id', $query->createNamedParameter($fileId)))
+            ->andWhere($query->expr()->eq('user_id', $query->createNamedParameter($this->userId)));
+
+        if (!empty($name)) {
+            $query->andWhere($query->expr()->eq('name', $query->createNamedParameter($name)));
+						  
+					   
+						
+							   
         }
 
-        return $this->findEntities($sql, $args);
+        return $this->findEntities($query); 
     }
 
     /**