public CmsFolder readFolder(A_CmsProject project, String foldername)
throws CmsException {
CmsFolder folder=null;
ResultSet res =null;
try {
<BUG>Statement s = m_Con.createStatement();
s.setEscapeProcessing(false);
res = s.executeQuery("SELECT * FROM RESOURCES WHERE RESOURCE_NAME = '"+foldername
+"' AND PROJECT_ID = "+project.getId());
if(res.next()) {</BUG>
folder = new CmsFolder(res.getString(C_RESOURCE_NAME),

public CmsFolder readFolder(A_CmsProject project, String foldername)
throws CmsException {
CmsFolder folder=null;
ResultSet res =null;
try {
PreparedStatement statementResourceRead=m_Con.prepareStatement(C_RESOURCE_READ);
statementResourceRead.setString(1,absoluteName(foldername));
statementResourceRead.setInt(2,project.getId());
res = statementResourceRead.executeQuery();
if(res.next()) {
folder = new CmsFolder(res.getString(C_RESOURCE_NAME),
