aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/OpenSim/Data/MySQL
diff options
context:
space:
mode:
authorroot2009-12-27 01:32:23 +0100
committerMelanie2009-12-26 23:57:49 +0000
commitb7951d5177c0b575815f4d8a9ef35a0e7af58973 (patch)
treeef8ec80c32dd3e8d77af308cba69325f1c989cac /OpenSim/Data/MySQL
parentClose a SQL injection loophole in the new database driver (diff)
downloadopensim-SC_OLD-b7951d5177c0b575815f4d8a9ef35a0e7af58973.zip
opensim-SC_OLD-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.gz
opensim-SC_OLD-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.bz2
opensim-SC_OLD-b7951d5177c0b575815f4d8a9ef35a0e7af58973.tar.xz
Correct some issues with the last commit
Diffstat (limited to 'OpenSim/Data/MySQL')
-rw-r--r--OpenSim/Data/MySQL/MySQLGenericTableHandler.cs3
1 files changed, 2 insertions, 1 deletions
diff --git a/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs b/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs
index 58b95d7..b2bd5f6 100644
--- a/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs
+++ b/OpenSim/Data/MySQL/MySQLGenericTableHandler.cs
@@ -205,7 +205,8 @@ namespace OpenSim.Data.MySQL
205 foreach (FieldInfo fi in m_Fields.Values) 205 foreach (FieldInfo fi in m_Fields.Values)
206 { 206 {
207 names.Add(fi.Name); 207 names.Add(fi.Name);
208 values.Add(fi.GetValue(row).ToString()); 208 values.Add("?" + fi.Name);
209 cmd.Parameters.AddWithValue(fi.Name, fi.GetValue(row).ToString());
209 } 210 }
210 211
211 if (m_DataField != null) 212 if (m_DataField != null)