From 849ac27e240cd8384bf2b8f5b91809a31f80f8ac Mon Sep 17 00:00:00 2001 From: skull132 Date: Sun, 25 Oct 2015 22:32:51 +0200 Subject: [PATCH] Text SQL Sanitzation Fixes Because I was dumb. This should fix issues with notes and warnings, previously generated by the inputs not getting sanitized properly, and thus driving SQL insane. --- code/modules/admin/player_notes_sql.dm | 2 ++ code/modules/admin/verbs/warning.dm | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/code/modules/admin/player_notes_sql.dm b/code/modules/admin/player_notes_sql.dm index b80d2b83..0eac3ee8 100644 --- a/code/modules/admin/player_notes_sql.dm +++ b/code/modules/admin/player_notes_sql.dm @@ -8,6 +8,8 @@ var/ckey = sanitizeSQL(key) var/content = sanitizeSQL(note) + note = sql_sanitize_text(note) + var/a_ckey if(usr) a_ckey = sanitizeSQL(usr.key) diff --git a/code/modules/admin/verbs/warning.dm b/code/modules/admin/verbs/warning.dm index a9288213..d222bb5e 100644 --- a/code/modules/admin/verbs/warning.dm +++ b/code/modules/admin/verbs/warning.dm @@ -88,8 +88,12 @@ if(!reason) return + reason = sql_sanitize_text(reason) + var/notes = input("Add Additional Information. This is visible to staff only.") as null|text + notes = sql_sanitize_text(notes) + var/severity switch(alert("Set Warning Severity",,"Standard","Severe")) if("Standard")