[HarrisonC]

Quote:

Originally Posted by AmigaBlizzard Don't use "%s" for a player's name, always use %e to prevent mysql injections. If a player would enter a name like PHP код: ";DROP TABLE players;"  , your database is gone without warning if you use %s for user-inputted text. As for the problem, %i or %d would be fine as Harrison said, without the ' around it. You only need to use a value between ' when it's a string.

Assumed he would've escaped the string beforehand.
I like to do that just to be sure