Core/DBLayer: Convert PAppend() queries to prepared statements No.1

1 files changed, 8 insertions, 1 deletions

diff --git a/src/server/game/Handlers/ItemHandler.cpp b/src/server/game/Handlers/ItemHandler.cpp
index 2434ba6eaa7..8a60f21dac9 100755
--- a/src/server/game/Handlers/ItemHandler.cpp
+++ b/src/server/game/Handlers/ItemHandler.cpp
@@ -1124,7 +1124,14 @@ void WorldSession::HandleWrapItemOpcode(WorldPacket& recv_data)
     }
 
     SQLTransaction trans = CharacterDatabase.BeginTransaction();
-    trans->PAppend("INSERT INTO character_gifts VALUES ('%u', '%u', '%u', '%u')", GUID_LOPART(item->GetOwnerGUID()), item->GetGUIDLow(), item->GetEntry(), item->GetUInt32Value(ITEM_FIELD_FLAGS));
+
+    PreparedStatement* stmt = CharacterDatabase.GetPreparedStatement(CHAR_INS_CHAR_GIFT);
+    stmt->setUInt32(0, GUID_LOPART(item->GetOwnerGUID()));
+    stmt->setUInt32(0, item->GetGUIDLow());
+    stmt->setUInt32(0, item->GetEntry());
+    stmt->setUInt32(0, item->GetUInt32Value(ITEM_FIELD_FLAGS));
+    trans->Append(stmt);
+
     item->SetEntry(gift->GetEntry());
 
     switch (item->GetEntry())