31.05.2015, 20:44
Quote:
I know you fixed it but keep in mind that the output of WP_Hash will always be between 0-9 and A-F so there isn't any reason to escape the string. Any other input by user (strings) - yes, escape them to avoid SQL Injection.
|
Код:
{ WP_Hash(HPass, 129, inputtext); mysql_format(1, query, sizeof(query), "INSERT INTO masterdata (uName, uPass) VALUES ('%e', '%e')", MasterData[playerid][uName], HPass); mysql_tquery(1, query, "OnPlayerAccountRegister", "i", playerid); }