10.01.2015, 17:41
Hi,
sscanf escape string? because now i use threaded queries and i have player variables
And i have query inside it, in callback i use VariableFP update by player name, but if player again write this command He can change VariableFP value to other and then when query complete and take value From VariableFP it will be not that and player could do sql injection.
sscanf escape string? because now i use threaded queries and i have player variables
Код:
new VariableFP[ MAX_PLAYERS ][ MAX_PLAYER_NAME ];
Код:
if (sscanf(params, "s[25]", VariableFP[ playerid ] ))
{
return 1;
}