Merge pull request #24501 from MrStonedOne/patch-321

Patches around byond bug ID:2218538 (sql quote acting odd)
This commit is contained in:
oranges
2017-03-01 09:08:19 +13:00
committed by GitHub
+3 -3
View File
@@ -14,8 +14,8 @@
*/
// Run all strings to be used in an SQL query through this proc first to properly escape out injection attempts.
/proc/sanitizeSQL(t as text)
var/sqltext = dbcon.Quote(t);
/proc/sanitizeSQL(t)
var/sqltext = dbcon.Quote("[t]");
return copytext(sqltext, 2, lentext(sqltext));//Quote() adds quotes around input, we already do that
/proc/format_table_name(table as text)
@@ -553,4 +553,4 @@ var/list/binary = list("0","1")
var/list/tosend = list()
tosend["data"] = finalized
log << json_encode(tosend)
log << json_encode(tosend)