Fix code scanning alert no. 10: Database query built from user-contro…

…lled sources

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

data/service/userSettings.go

@@ -177,7 +177,7 @@ func (ss *UserSettingsService) Get(userObject *model.TableUserSettings, UserName
 
 	if err := ss.Session.Debug().
 		Table("user_settings").
-		Where(sqlWhere).Find(&data).Error; err != nil {
+		Where("guid = ? AND username = ?", userObject.GUID, UserName).Find(&data).Error; err != nil {
 		return data, err
 	}
 	return data, nil
@@ -197,7 +197,7 @@ func (ss *UserSettingsService) Delete(userObject *model.TableUserSettings, UserN
 
 	if err := ss.Session.Debug().
 		Table("user_settings").
-		Where(sqlWhere).
+		Where("guid = ? AND username = ?", userObject.GUID, UserName).
 		Delete(model.TableUserSettings{}).Error; err != nil {
 		return err
 	}
@@ -220,7 +220,7 @@ func (ss *UserSettingsService) Update(userObject *model.TableUserSettings, UserN
 		Table("user_settings").
 		Debug().
 		Model(&model.TableUserSettings{}).
-		Where(sqlWhere).Update(userObject).Error; err != nil {
+		Where("guid = ? AND username = ?", userObject.GUID, UserName).Update(userObject).Error; err != nil {
 		return err
 	}
 	return nil