V 2.1.0 Verbesserungen von Claude Code eingeügt

app/api/werte/[id]/route.ts

@@ -12,18 +12,30 @@ export async function PUT(
     const { id } = await context.params;
     const body: CreateWerteEntry = await request.json();
     
-    const sql = `UPDATE ${TABLE} SET 
-      Datum = '${body.Datum}',
-      Zeit = '${body.Zeit}',
-      Zucker = ${body.Zucker || 'NULL'},
-      Essen = ${body.Essen ? `'${body.Essen.replace(/'/g, "''")}'` : 'NULL'},
-      Gewicht = ${body.Gewicht || 'NULL'},
-      DruckS = ${body.DruckS || 'NULL'},
-      DruckD = ${body.DruckD || 'NULL'},
-      Puls = ${body.Puls || 'NULL'}
-      WHERE ID = ${parseInt(id, 10)}`;
-    
-    const result = await query(sql);
+    const sql = `UPDATE ${TABLE} SET
+      Datum = ?,
+      Zeit = ?,
+      Zucker = ?,
+      Essen = ?,
+      Gewicht = ?,
+      DruckS = ?,
+      DruckD = ?,
+      Puls = ?
+      WHERE ID = ?`;
+
+    const params = [
+      body.Datum,
+      body.Zeit,
+      body.Zucker || null,
+      body.Essen || null,
+      body.Gewicht ? parseFloat(parseFloat(String(body.Gewicht)).toFixed(1)) : null,
+      body.DruckS || null,
+      body.DruckD || null,
+      body.Puls || null,
+      parseInt(id, 10),
+    ];
+
+    const result = await query(sql, params);
     
     return NextResponse.json({ success: true, data: result });
   } catch (error) {
@@ -42,8 +54,8 @@ export async function DELETE(
   try {
     const { id } = await context.params;
     
-    const sql = `DELETE FROM ${TABLE} WHERE ID = ${parseInt(id, 10)}`;
-    const result = await query(sql);
+    const sql = `DELETE FROM ${TABLE} WHERE ID = ?`;
+    const result = await query(sql, [parseInt(id, 10)]);
     
     return NextResponse.json({ success: true, data: result });
   } catch (error) {