|
@@ -423,6 +423,7 @@ int mapif_parse_GMmessage(int fd)
|
|
|
int mapif_parse_WisRequest(int fd) {
|
|
|
struct WisData* wd;
|
|
|
static int wisid = 0;
|
|
|
+ char t_name[32];
|
|
|
|
|
|
if (RFIFOW(fd,2)-52 >= sizeof(wd->msg)) {
|
|
|
printf("inter: Wis message size too long.\n");
|
|
@@ -431,7 +432,8 @@ int mapif_parse_WisRequest(int fd) {
|
|
|
printf("inter: Wis message doesn't exist.\n");
|
|
|
return 0;
|
|
|
}
|
|
|
- sprintf (tmp_sql, "SELECT `name` FROM `%s` WHERE `name`='%s'",char_db, RFIFOP(fd,28));
|
|
|
+ sprintf (tmp_sql, "SELECT `name` FROM `%s` WHERE `name`='%s'",
|
|
|
+ char_db, jstrescapecpy(t_name, (char *)RFIFOP(fd,28)));
|
|
|
if(mysql_query(&mysql_handle, tmp_sql) ) {
|
|
|
printf("DB server Error - %s\n", mysql_error(&mysql_handle) );
|
|
|
}
|