xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-12 14:21:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: more sql injection escapes...

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-17 16:13:06 +02:00
parent 17fcadc3d1
commit 2b12f16b3d
7 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dorf2.php
+1 -1
View File
@@ -13,7 +13,7 @@ include("GameEngine/Village.php");
$start = $generator->pageLoadTimeStart();
if(isset($_GET['newdid'])) {
$_SESSION['wid'] = $_GET['newdid'];
$database->query("UPDATE ".TB_PREFIX."users SET village_select=".$_GET['newdid']." WHERE id=".$session->uid);
$database->query("UPDATE ".TB_PREFIX."users SET village_select=".$database->escape($_GET['newdid'])." WHERE id=".$session->uid);
header("Location: ".$_SERVER['PHP_SELF']);
}else{
$building->procBuild($_GET);