xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-21 12:06:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: more sql injection escapes...

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-17 16:13:06 +02:00
parent 17fcadc3d1
commit 2b12f16b3d
7 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Alliance.php
+1
View File
@@ -454,6 +454,7 @@
private function updateMax($leader) {
global $bid18, $database;
$leader = $database->escape($leader);
$q = mysqli_query($GLOBALS['link'],"SELECT * FROM " . TB_PREFIX . "alidata where leader = $leader");
if(mysqli_num_rows($q) > 0){
$villages = $database->getVillagesID2($leader);