mirror of
https://github.com/Relintai/rcpp_framework.git
synced 2024-11-14 04:57:21 +01:00
Use the escaped version of val() on user inputs.
This commit is contained in:
parent
b05682b605
commit
3f02dc2f79
@ -13,8 +13,8 @@ void DBBasedUser::save() {
|
||||
|
||||
if (id == 0) {
|
||||
b->insert(_table_name, "username, email, rank, pre_salt, post_salt, password_hash, banned, password_reset_token, locked")->values();
|
||||
b->val(name);
|
||||
b->val(email);
|
||||
b->eval(name);
|
||||
b->eval(email);
|
||||
b->val(rank);
|
||||
b->val(pre_salt);
|
||||
b->val(post_salt);
|
||||
|
Loading…
Reference in New Issue
Block a user