*Fixed SaveGMTicket - by Machiavelli

--HG--
branch : trunk

1 files changed, 12 insertions, 11 deletions

diff --git a/src/game/TicketMgr.cpp b/src/game/TicketMgr.cpp
index 7c86cde723b..1e28c2a2ec1 100644
--- a/src/game/TicketMgr.cpp
+++ b/src/game/TicketMgr.cpp
@@ -169,18 +169,19 @@ void TicketMgr::RemoveGMTicketByPlayer(uint64 playerGuid, uint64 GMguid)
 
 void TicketMgr::SaveGMTicket(GM_Ticket* ticket)
 {
+	std::string msg = ticket->message;
+    CharacterDatabase.escape_string(msg);
 	std::stringstream ss;
-	ss << "REPLACE INTO `gm_tickets` (`guid`, `playerGuid`, `name`, `message`, `timestamp`, `closed`, `assignedto`, `comment`) VALUES(\"";
-	ss << ticket->guid << "\", \"";
-	ss << ticket->playerGuid << "\", \"";
-	ss << ticket->name << "\", \"";
-	ss << ticket->message << "\", \"" ;
-	ss << ticket->timestamp << "\", \"";
-	ss << ticket->closed << "\", \"";
-	ss << ticket->assignedToGM << "\", \"";
-	ss << ticket->comment << "\");";
-
-	CharacterDatabase.BeginTransaction();
+	ss << "REPLACE INTO `gm_tickets` (`guid`, `playerGuid`, `name`, `message`, `timestamp`, `closed`, `assignedto`, `comment`) VALUES('";
+	ss << ticket->guid << "', '";
+	ss << ticket->playerGuid << "', '";
+	ss << ticket->name << "', '";
+	ss << msg << "', '" ;
+	ss << ticket->timestamp << "', '";
+	ss << ticket->closed << "', '";
+	ss << ticket->assignedToGM << "', '";
+	ss << ticket->comment << "');";
+    CharacterDatabase.BeginTransaction();
 	CharacterDatabase.Execute(ss.str().c_str());
 	CharacterDatabase.CommitTransaction();