Posts: 2,528
Threads: 124
Joined: Jul 2009
Reputation:
0
Yeah, 'A*А' doesn't look like 'Ryan_Bowe'. How does your GetPlayerNameEx look like? Print its result before using it in mysql_format.
Posts: 2,528
Threads: 124
Joined: Jul 2009
Reputation:
0
Hm, there is no buffer overflow, no idea then (without knowing GetPlayerNameEx implementation). I'd try manually using mysql_escape_string on that string, checking if it's okay, then passing it as %s.