Skip to content

Commit 4a483b7

Browse files
authored
fix: 🐛 GameCMS: Unsafe name on GetAdminID (#272)
* fix: 🐛 `GameCMS`: Unsafe name on GetAdminID close #271 * Add braces
1 parent f83b693 commit 4a483b7

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

cstrike/addons/amxmodx/scripting/CA_Storage_GameCMS.sma

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -498,8 +498,11 @@ GameCMS_GetAdminID(const id) {
498498
get_user_authid(id, authID, charsmax(authID))
499499
get_user_name(id, name, charsmax(name))
500500

501-
formatex(g_query, charsmax(g_query), "SELECT id FROM admins WHERE name = '%s' or name = '%s' LIMIT 1;",
502-
authID, name
501+
new name_safe[MAX_NAME_LENGTH * 2]
502+
SQL_QuoteString(Empty_Handle, name_safe, charsmax(name_safe), name)
503+
504+
formatex(g_query, charsmax(g_query), "SELECT id FROM admins WHERE (name = '%s' or name = '%s') LIMIT 1;",
505+
authID, name_safe
503506
)
504507

505508
new data[1]; data[0] = id

0 commit comments

Comments
 (0)