From e86fd2a6367cd04cfcb74a25ab9ffd58d4af8e28 Mon Sep 17 00:00:00 2001 From: Krausus Date: Thu, 21 May 2015 20:54:06 -0400 Subject: [PATCH] Fixes missing sanitization in karma logging --- code/modules/karma/karma.dm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/code/modules/karma/karma.dm b/code/modules/karma/karma.dm index feab27efbbc..ed00a84e97c 100644 --- a/code/modules/karma/karma.dm +++ b/code/modules/karma/karma.dm @@ -1,7 +1,7 @@ proc/sql_report_karma(var/mob/spender, var/mob/receiver) - var/sqlspendername = spender.name + var/sqlspendername = sanitizeSQL(spender.name) var/sqlspenderkey = spender.key - var/sqlreceivername = receiver.name + var/sqlreceivername = sanitizeSQL(receiver.name) var/sqlreceiverkey = receiver.key var/sqlreceiverrole = "None" var/sqlreceiverspecial = "None" @@ -10,9 +10,9 @@ proc/sql_report_karma(var/mob/spender, var/mob/receiver) if(receiver.mind) if(receiver.mind.special_role) - sqlreceiverspecial = receiver.mind.special_role + sqlreceiverspecial = sanitizeSQL(receiver.mind.special_role) if(receiver.mind.assigned_role) - sqlreceiverrole = receiver.mind.assigned_role + sqlreceiverrole = sanitizeSQL(receiver.mind.assigned_role) if(!dbcon.IsConnected()) log_game("SQL ERROR during karma logging. Failed to connect.")