cyberpresidentvanellope/Paradise
1
0
Fork 0
mirror of https://github.com/ParadiseSS13/Paradise.git synced 2026-07-12 07:33:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

Sanitize search query

Browse Source
This commit is contained in:
Tastyfish
2016-04-11 03:27:06 -04:00
parent 65432404fa
commit b9a161222f
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code/modules/library/computers/base.dm
+3 -3
View File
@@ -33,13 +33,13 @@
var/where = 0
if(query)
if(query.title && query.title != "")
searchquery += " WHERE title LIKE '%[query.title]%'"
searchquery += " WHERE title LIKE '%[sanitizeSQL(query.title)]%'"
where = 1
if(query.author && query.author != "")
searchquery += " [!where ? "WHERE" : "AND"] author LIKE '%[query.author]%'"
searchquery += " [!where ? "WHERE" : "AND"] author LIKE '%[sanitizeSQL(query.author)]%'"
where = 1
if(query.category && query.category != "")
searchquery += " [!where ? "WHERE" : "AND"] category LIKE '%[query.category]%'"
searchquery += " [!where ? "WHERE" : "AND"] category LIKE '%[sanitizeSQL(query.category)]%'"
if(query.category == "Fiction")
searchquery += " AND category NOT LIKE '%Non-Fiction%'"
where = 1