From 1a311585bea5adf3392b092ec0c5b7f3977bcd6a Mon Sep 17 00:00:00 2001 From: H-M-H Date: Sat, 3 Sep 2016 18:28:11 +0200 Subject: [PATCH] escape strings before applying FuzzyString --- src/game/server/score/sql_score.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/game/server/score/sql_score.cpp b/src/game/server/score/sql_score.cpp index 61632ceef3e..9ac0642bceb 100644 --- a/src/game/server/score/sql_score.cpp +++ b/src/game/server/score/sql_score.cpp @@ -262,6 +262,7 @@ void CSqlScore::MapVote(int ClientID, const char* MapName) Tmp->m_ClientID = ClientID; Tmp->m_RequestedMap = MapName; str_copy(Tmp->m_aFuzzyMap, MapName, sizeof(Tmp->m_aFuzzyMap)); + sqlstr::ClearString(Tmp->m_aFuzzyMap, sizeof(Tmp->m_aFuzzyMap)); sqlstr::FuzzyString(Tmp->m_aFuzzyMap); void *VoteThread = thread_init(ExecSqlFunc, new CSqlExecData(MapVoteThread, Tmp)); @@ -357,6 +358,7 @@ void CSqlScore::MapInfo(int ClientID, const char* MapName) Tmp->m_ClientID = ClientID; Tmp->m_RequestedMap = MapName; str_copy(Tmp->m_aFuzzyMap, MapName, sizeof(Tmp->m_aFuzzyMap)); + sqlstr::ClearString(Tmp->m_aFuzzyMap, sizeof(Tmp->m_aFuzzyMap)); sqlstr::FuzzyString(Tmp->m_aFuzzyMap); void *InfoThread = thread_init(ExecSqlFunc, new CSqlExecData(MapInfoThread, Tmp));