Fixes sql errors caused by odd and unexpected behavor in dbcon.Quote()

This commit is contained in:
MrStonedOne
2014-08-18 14:07:14 +01:00
committed by Mloc-Argent
parent f396b94068
commit 873c15178c
+2 -1
View File
@@ -15,7 +15,8 @@
// Run all strings to be used in an SQL query through this proc first to properly escape out injection attempts.
/proc/sanitizeSQL(var/t as text)
return dbcon.Quote(t);
var/sqltext = dbcon.Quote(t);
return copytext(sqltext, 2, lentext(sqltext)-1);//Quote() adds quotes around input, we already do that
/*
* Text sanitization