Posts: 6,129
Threads: 36
Joined: Jan 2009
Quote:
Originally Posted by Anthonyx3'
edit:
pawn Код:
if (dialogid == 1) { new string[256], escpass[100]; mysql_real_escape_string(inputtext, escpass); GetPlayerName(playerid, UserStats[playerid][Name], MAX_PLAYER_NAME); format(string,sizeof(string),"INSERT INTO `Users` (`Name`, `Password`) VALUES ('%s', '%s')",UserStats[playerid][Name], escpass); mysql_query(string); }
Would work right? and anti injectable?
|
If that's the correct order for function parameters in the MySQL plugin you use, yes.