From e433e0283dea9724fa7b674dd7ba002467f6583a Mon Sep 17 00:00:00 2001
From: Tigercat2000 <nick.pilant2@gmail.com>
Date: Thu, 16 Feb 2017 16:06:00 -0800
Subject: [PATCH] Add sanitizeSQL

---
 code/modules/admin/topic.dm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/code/modules/admin/topic.dm b/code/modules/admin/topic.dm
index 97f531b89fc..4f8680cbeae 100644
--- a/code/modules/admin/topic.dm
+++ b/code/modules/admin/topic.dm
@@ -1,4 +1,4 @@
-/datum/admins/Topic(href, href_list)
+7/datum/admins/Topic(href, href_list)
 	..()
 
 	if(usr.client != src.owner || !check_rights(0))
@@ -3021,7 +3021,7 @@
 
 	// Library stuff
 	else if(href_list["library_book_id"])
-		var/isbn = href_list["library_book_id"]
+		var/isbn = sanitizeSQL(href_list["library_book_id"])
 
 		if(href_list["view_library_book"])
 			var/DBQuery/query_view_book = dbcon.NewQuery("SELECT content, title FROM [format_table_name("library")] WHERE id=[isbn]")