xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-10 05:11:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Some important fixes

Browse Source 
Some important fixes
This commit is contained in:
novgorodschi catalin
2026-08-05 10:21:53 +03:00
parent b2dec1d942
commit b21f60c2b1
6 changed files with 190 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Database/DatabaseMovementQueries.php
+14
View File
@@ -24,6 +24,20 @@ trait DatabaseMovementQueries {
function setMovementProc($moveid) {
// $moveid poate fi UN identificator sau o LISTA separata prin virgula
// (vezi DatabaseVillageQueries, care trimite implode(', ', $moveIDs)),
// asa ca o simpla conversie la intreg ar rupe cazul cu lista.
//
// Filtram fiecare element in parte: raman doar numere, restul dispare.
// Asa "5 OR 1=1" nu mai poate ajunge in SQL.
$moveIds = array_filter(array_map('intval', explode(',', (string) $moveid)));
if (!$moveIds) {
return false;
}
$moveid = implode(', ', $moveIds);
if (!Math::isInt($moveid)) {
list($moveid) = $this->escape_input($moveid);
}