Skip to content
This repository was archived by the owner on Oct 14, 2021. It is now read-only.

Commit 9e22fa4

Browse files
author
captain1242
committed
Escaped all Parameters
I escaped the Parameters to prevent someone "Accidentally" Dropping your Database (Btw: The user for the bridge just needs read permissions)
1 parent 649405e commit 9e22fa4

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

lua/wl_bridge/wl_bridge_mysql.lua

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ function WLBridge.LoadPlayer(ply)
77
WLBridgeSQL.ply = ply
88
print(ply:SteamID())
99
print(WLBridgeSQL.ply:SteamID())
10-
local GetForumQ = WLBridge.DB:query("SELECT * FROM `"..WLBridge.Config.WorldLab.UserTable.."` WHERE `"..WLBridge.Config.WorldLab.UserTableSIDC.."`='"..WLBridgeSQL.ply:SteamID().."'")
10+
local GetForumQ = WLBridge.DB:query("SELECT * FROM `"..WLBridge.DB:escape(WLBridge.Config.WorldLab.UserTable).."` WHERE `"..WLBridge.DB:escape(WLBridge.Config.WorldLab.UserTableSIDC).."`='"..WLBridge.DB:escape(WLBridgeSQL.ply:SteamID()).."'")
1111
GetForumQ:start()
1212
GetForumQ:wait()
1313
GetForumQ.onSuccess = function() print("HAHA SUCCESS") end
@@ -21,7 +21,7 @@ end
2121

2222
function WLBridge.LoadPlayerRank()
2323
print("Running LoadPlayerRank")
24-
local GetRankIDQ = WLBridge.DB:query("SELECT * FROM `"..WLBridge.Config.WorldLab.UserToGroupTable.."` WHERE `userID`='"..WLBridgeSQL.User.userID.."'")
24+
local GetRankIDQ = WLBridge.DB:query("SELECT * FROM `"..WLBridge.DB:escape(WLBridge.Config.WorldLab.UserToGroupTable).."` WHERE `userID`='"..WLBridge.DB:escape(WLBridgeSQL.User.userID).."'")
2525
GetRankIDQ:start()
2626
GetRankIDQ:wait()
2727
if GetRankIDQ:getData() ~= nil and GetRankIDQ:getData()[1] ~= nil then
@@ -36,7 +36,7 @@ function WLBridge.RankPlayer()
3636
local WLBool = false
3737
WLBridgeSQL.PlayerGroups = WLBridgeSQL.PlayerGroups or {}
3838
for k,v in pairs(WLBridgeSQL.GroupID) do
39-
local GetPlyGroups = WLBridge.DB:query("SELECT * FROM `"..WLBridge.Config.WorldLab.GroupTable.."` WHERE `groupID`='"..v.groupID.."'")
39+
local GetPlyGroups = WLBridge.DB:query("SELECT * FROM `"..WLBridge.DB:escape(WLBridge.Config.WorldLab.GroupTable).."` WHERE `groupID`='"..WLBridge.DB:escape(v.groupID).."'")
4040
GetPlyGroups:start()
4141
GetPlyGroups:wait()
4242
if GetPlyGroups:getData() ~= nil and GetPlyGroups:getData()[1] ~= nil then

0 commit comments

Comments
 (0)