Correct the way update is rendered

ShiftLeftSecurity · Jun 26, 2018 · bd7e1fa · bd7e1fa
1 parent 91057ad
commit bd7e1fa
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/db/chain/chain.go b/db/chain/chain.go
@@ -594,9 +594,8 @@ func (ec *ExpresionChain) render(raw bool) (string, []interface{}, error) {
 		if len(expresion) == 0 {
 			return "", nil, errors.Errorf("empty update expresion")
 		}
-		query = fmt.Sprintf("UPDATE ? SET (%s)",
-			ec.mainOperation.expresion)
-		args = append(args, ec.table)
+		query = fmt.Sprintf("UPDATE %s SET (%s)",
+			ec.table, ec.mainOperation.expresion)
 		args = append(args, ec.mainOperation.arguments...)
 	// SELECT, DELETE
 	case sqlSelect, sqlDelete: