diff --git a/code/__HELPERS/text.dm b/code/__HELPERS/text.dm index 9edfa40de0c..a01887727c1 100644 --- a/code/__HELPERS/text.dm +++ b/code/__HELPERS/text.dm @@ -14,8 +14,8 @@ */ // Run all strings to be used in an SQL query through this proc first to properly escape out injection attempts. -/proc/sanitizeSQL(t as text) - var/sqltext = dbcon.Quote(t); +/proc/sanitizeSQL(t) + var/sqltext = dbcon.Quote("[t]"); return copytext(sqltext, 2, lentext(sqltext));//Quote() adds quotes around input, we already do that /proc/format_table_name(table as text) @@ -553,4 +553,4 @@ var/list/binary = list("0","1") var/list/tosend = list() tosend["data"] = finalized - log << json_encode(tosend) \ No newline at end of file + log << json_encode(tosend)