[MySQL] Problem With Updating a Varchar Field

[MySQL] Problem With Updating a Varchar Field - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Scripting and Plugins (https://sampforum.blast.hk/forumdisplay.php?fid=8)
+--- Forum: Scripting Help (https://sampforum.blast.hk/forumdisplay.php?fid=12)
+--- Thread: [MySQL] Problem With Updating a Varchar Field (/showthread.php?tid=551311)

[MySQL] Problem With Updating a Varchar Field - amirab - 18.12.2014

hey all
in changing password in game
i wanna update the password field
but i'll get errors

this is my code :

PHP код:



mysql_format(g_MySQL, query, sizeof(query), "UPDATE `accounts` SET `Password` = %e WHERE `UserID`=%d" , inputtext, PlayerInfo[playerid][UserID]);

can anybody help me? i really need it

Re: [MySQL] Problem With Updating a Varchar Field - Sawalha - 18.12.2014

Add the ' symbol near %d and %s :

pawn Код:

"UPDATE `accounts` SET `Password`='%s' WHERE `UserID`='%d'", inputtext, PlayerInfo[playerid][UserID]);

Recommended to use %i instead of %d for user ids.

Re: [MySQL] Problem With Updating a Varchar Field - amirab - 18.12.2014

oh god thanks
i forgot to add this in here
in saving at OnPlayerDisconnect i did but here ....
thanks +REP

Re: [MySQL] Problem With Updating a Varchar Field - Vince - 18.12.2014

Plaintext password, unescaped. No.

Re: [MySQL] Problem With Updating a Varchar Field - BroZeus - 18.12.2014

Quote:

Originally Posted by Vince

Plaintext password, unescaped. No.

Explain to him in more details. Experienced scripters can understand what you are trying to say here but he may not.

Well he is trying to say that use mysql_escape_string function on password to avoid mysql injections and use a hasher to hash the password in case your mysql gets hacked. You can read at ****** about them.

Re: [MySQL] Problem With Updating a Varchar Field - M4D - 18.12.2014

Quote:

Originally Posted by BroZeus

He use mysql_format , so he can use %e instead of %s…
It will automaticly escape string !