AstralTransRocketries/MCGalaxy
1
0
Fork 0
mirror of https://github.com/ClassiCube/MCGalaxy.git synced 2025-09-22 20:16:36 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix ' not being escaped properly when saving a DB table.

Browse Source
This commit is contained in:
UnknownShadow200 2016-09-05 14:25:52 +10:00
parent 4be7974142
commit 35230bac70
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Server/BackupDB.cs
View File

@ -90,9 +90,9 @@ namespace MCGalaxy {
sql.Write("'{0:yyyy-MM-dd HH:mm:ss.ffff}'", (DateTime)row[col]);
} else if (type == typeof(bool)) {
sql.Write((bool)row[col] ? "1" : "0");
} else if (type == typeof(string)) { // Requires ''
} else if (type == typeof(string)) {
string value = row[col].ToString();
if (value.IndexOf(' ') >= 0)
if (value.IndexOf('\'') >= 0) // escape '
value = value.Replace("'", "''");
sql.Write("'{0}'", value);
} else {