diff options
author | root | 2009-12-27 01:32:23 +0100 |
---|---|---|
committer | Melanie | 2009-12-26 23:57:49 +0000 |
commit | b7951d5177c0b575815f4d8a9ef35a0e7af58973 (patch) | |
tree | ef8ec80c32dd3e8d77af308cba69325f1c989cac /OpenSim/Data/MySQL/MySQLGenericTableHandler.cs | |
parent | Close a SQL injection loophole in the new database driver (diff) | |
download | opensim-SC-b7951d5177c0b575815f4d8a9ef35a0e7af58973.zip opensim-SC-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.gz opensim-SC-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.bz2 opensim-SC-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.xz |
Correct some issues with the last commit
Diffstat (limited to 'OpenSim/Data/MySQL/MySQLGenericTableHandler.cs')
-rw-r--r-- | OpenSim/Data/MySQL/MySQLGenericTableHandler.cs | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs b/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs index 58b95d7..b2bd5f6 100644 --- a/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs +++ b/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs | |||
@@ -205,7 +205,8 @@ namespace OpenSim.Data.MySQL | |||
205 | foreach (FieldInfo fi in m_Fields.Values) | 205 | foreach (FieldInfo fi in m_Fields.Values) |
206 | { | 206 | { |
207 | names.Add(fi.Name); | 207 | names.Add(fi.Name); |
208 | values.Add(fi.GetValue(row).ToString()); | 208 | values.Add("?" + fi.Name); |
209 | cmd.Parameters.AddWithValue(fi.Name, fi.GetValue(row).ToString()); | ||
209 | } | 210 | } |
210 | 211 | ||
211 | if (m_DataField != null) | 212 | if (m_DataField != null) |