From 599a24df249ab43cb08864a6ffa19b1b769aab54 Mon Sep 17 00:00:00 2001 From: Vinolentus Date: Mon, 12 Dec 2011 20:36:46 +0100 Subject: Core/ObjectMgr: Fix possible SQL injection for game_tele --- src/server/game/Globals/ObjectMgr.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/server') diff --git a/src/server/game/Globals/ObjectMgr.cpp b/src/server/game/Globals/ObjectMgr.cpp index 4e159209e86..ff3815d367f 100755 --- a/src/server/game/Globals/ObjectMgr.cpp +++ b/src/server/game/Globals/ObjectMgr.cpp @@ -8041,7 +8041,7 @@ bool ObjectMgr::AddGameTele(GameTele& tele) m_GameTeleMap[new_id] = tele; std::string safeName(tele.name); - WorldDatabase.EscapeString(safeName); + WorldDatabase.escape_string(safeName); WorldDatabase.PExecute("INSERT INTO game_tele (id, position_x, position_y, position_z, orientation, map, name) VALUES (%u, %f, %f, %f, %f, %d, '%s')", new_id, tele.position_x, tele.position_y, tele.position_z, tele.orientation, tele.mapId, safeName.c_str()); -- cgit v1.2.3