transform some condition to prepared conditions

entity/Address_entity/conditionProcess.js

+import("Sql_lib");
+import("system.db");
 import("system.result");
-import("system.vars");
 
-if (vars.exists("$param.ContactId_param") && vars.get("$param.ContactId_param"))
-    result.string("ADDRESS.CONTACT_ID = ('" + vars.getString("$param.ContactId_param") + "')");  
-else
-    result.string("1=1");  
+result.string(db.translateCondition(SqlCondition.begin().andPrepareVars("ADDRESS.CONTACT_ID", "$param.ContactId_param").build("1=1")));  

entity/Address_entity/recordcontainers/childgroup/query.js

+import("Sql_lib");
+import("system.db");
 import("system.result");
 import("system.vars");
-import("system.db");
-
-var sqlQuery, queryCondition, affectedIds;
 
+var affectedIds;
 if (vars.exists("$local.idvalue")) {
     affectedIds = vars.get("$local.idvalue");
-    queryCondition = " where ADDRESS.ADDRESSID in ('" + affectedIds.map(function (v){return db.quote(v);}).join("', '") + "')";
-    //TODO: refactor this for incremental indexer (injections?)
 }
 
-sqlQuery = 'select ADDRESS.ADDRESSID as "_uid_"' 
-    + ', ADDRESS.ADDRESSID'
-    + ', ADDRESS.ZIP as ZIP' 
-    + ', ADDRESS.CITY as CITY' 
-    + ', ADDRESS.COUNTRY' 
-    + ', ADDRESS.ADDRESS' 
-    + ', ADDRESS.BUILDINGNO'
-    + " from ADDRESS"
-    + (queryCondition || "") 
-    + " order by ADDRESS.ADDRESSID ";
-
-result.string(sqlQuery);
\ No newline at end of file
+result.string(db.translateStatement(SqlCondition.begin()
+            .andIn(ADDRESS.ADDRESSID, affectedIds.map(function (v){return db.quote(v);}))
+            .buildSql("select \n\
+                        ADDRESS.ADDRESSID as \"_uid_\", \n\
+                        ADDRESS.ADDRESSID, \n\
+                        ADDRESS.ZIP as ZIP, \n\
+                        ADDRESS.CITY as CITY, \n\
+                        ADDRESS.COUNTRY, \n\
+                        ADDRESS.ADDRESS, \n\
+                        ADDRESS.BUILDINGNO", "", "order by ADDRESS.ADDRESSID")));
\ No newline at end of file

entity/AttributeRelation_entity/recordcontainers/jdito/contentProcess.js

@@ -152,7 +152,7 @@ var attrRelations = db.table(attributeSql.build()).map(
             minCountInsurance[attrId].count++;
         
         //TODO: what should be the uid if showEmpty is true?
-        //                 V-- set "," to mark this as new generated UUID
+        //                                    V-- set "," to mark this as new generated UUID
         return [
             attrRelId || util.getNewUUID() + "," + attrId, 
             attrParentId, 

entity/AttributeUsage_entity/recordcontainers/db/conditionProcess.js

+import("Sql_lib");
+import("system.db");
 import("system.result");
-import("system.vars");
 
-if(vars.exists("$param.AttributeId_param") && vars.get("$param.AttributeId_param"))
-    result.string("AB_ATTRIBUTEUSAGE.AB_ATTRIBUTE_ID = ('" + vars.getString("$param.AttributeId_param") + "')");  
-else
-    result.string("1 = 2");  
\ No newline at end of file
+result.string(db.translateCondition(SqlCondition.begin()
+        .andPrepareVars("AB_ATTRIBUTEUSAGE.AB_ATTRIBUTE_ID", "$param.AttributeId_param")
+        .build("1=2")));  

entity/Attribute_entity/entityfields/attribute_type/stateProcess.js

@@ -16,7 +16,7 @@ if (vars.get("$sys.recordstate") == neon.OPERATINGSTATE_EDIT || vars.get("$sys.r
         var hasSubordinate = db.cell(SqlCondition.begin()
             .andPrepareVars("AB_ATTRIBUTE.ATTRIBUTE_PARENT_ID", "$field.UID")
             .buildSql(
-                "select count(*) from AB_ATTRIBUTE", "1=2" //TODO: is there a way exists could be used?
+                "select count(*) from AB_ATTRIBUTE", "1=2" //TODO: is there a way exists could be used in all dbms?
                 )
             ) != "0";
         if (hasSubordinate)

entity/BulkMailRecipient_entity/recordcontainers/db/recordfieldmappings/status.displayvalue/expression.js

+import("Sql_lib");
 import("Contact_lib");
 import("system.translate");
 import("system.db");

entity/Communication_entity/Communication_entity.aod

@@ -313,7 +313,6 @@ Usually this is used for filtering COMMUNICATION-entries by a specified contact
       <indexRecordAlias>Data_alias</indexRecordAlias>
       <idColumn>COMMUNICATIONID</idColumn>
       <query>%aditoprj%/entity/Communication_entity/recordcontainers/groupextension/query.js</query>
-      <subProcess>%aditoprj%/entity/Communication_entity/recordcontainers/groupextension/subProcess.js</subProcess>
       <affectedTables>
         <element>COMMUNICATION</element>
         <element>AB_KEYWORD_ENTRY</element>