xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-09 06:06:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: potential SQL injection

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-20 00:52:47 +02:00
parent b3ae55f48a
commit 590892348a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Admin/Mods/addABTroops.php
+2 -2
View File
@@ -19,8 +19,8 @@ $user = $database->getUserArray($village['owner'],1);
$atech="";
$btech="";
for($i=1; $i<9; $i++) {
$atech.="a".$i."=".$_POST['a'.$i].", ";
$btech.="b".$i."=".$_POST['b'.$i].(($i > 7) ? "" : ", ");
$atech.="a".$i."=".$database->escape($_POST['a'.$i]).", ";
$btech.="b".$i."=".$database->escape($_POST['b'.$i]).(($i > 7) ? "" : ", ");
}
$q = "UPDATE ".TB_PREFIX."abdata SET ".$atech.$btech." WHERE vref = $id";