xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-07 05:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix CVE-2023-36995 name change alliance

Browse Source
This commit is contained in:
nixpc
2023-07-06 23:13:22 +02:00
parent e39ca488a9
commit 1549f830aa
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Database.php
+2
View File
@@ -3016,6 +3016,8 @@ class MYSQLi_DB implements IDbConnection {
function setAlliName($aid, $name, $tag) {
list($aid, $name, $tag) = $this->escape_input((int) $aid, $name, $tag);
$name = $this->RemoveXSS($name);
$name = $this->RemoveXSS($tag);
$q = "UPDATE " . TB_PREFIX . "alidata set name = '$name', tag = '$tag' where id = $aid";
return mysqli_query($this->dblink,$q);