plugins/sql-admin-manager.sp
changeset 1874 6bd98dba0f2a
parent 1405 502a9406dabf
child 1901 e9116270cf6a
     1.1 --- a/plugins/sql-admin-manager.sp	Fri Feb 22 01:56:22 2008 +0000
     1.2 +++ b/plugins/sql-admin-manager.sp	Fri Feb 22 02:23:17 2008 +0000
     1.3 @@ -417,7 +417,7 @@
     1.4  	decl String:identity[65];
     1.5  	decl String:safe_identity[140];
     1.6  	GetCmdArg(2, identity, sizeof(identity));
     1.7 -	SQL_QuoteString(db, identity, safe_identity, sizeof(safe_identity));
     1.8 +	SQL_EscapeString(db, identity, safe_identity, sizeof(safe_identity));
     1.9  	
    1.10  	decl String:query[255];
    1.11  	Format(query, 
    1.12 @@ -541,9 +541,9 @@
    1.13  	if (len > 1 && (name[0] == '"' && name[len-1] == '"'))
    1.14  	{
    1.15  		name[--len] = '\0';
    1.16 -		SQL_QuoteString(db, name[1], safe_name, sizeof(safe_name));
    1.17 +		SQL_EscapeString(db, name[1], safe_name, sizeof(safe_name));
    1.18  	} else {
    1.19 -		SQL_QuoteString(db, name, safe_name, sizeof(safe_name));
    1.20 +		SQL_EscapeString(db, name, safe_name, sizeof(safe_name));
    1.21  	}
    1.22  	
    1.23  	decl String:query[256];
    1.24 @@ -632,7 +632,7 @@
    1.25  	decl String:name[64];
    1.26  	decl String:safe_name[64];
    1.27  	GetCmdArg(1, name, sizeof(name));
    1.28 -	SQL_QuoteString(db, name, safe_name, sizeof(safe_name));
    1.29 +	SQL_EscapeString(db, name, safe_name, sizeof(safe_name));
    1.30  	
    1.31  	new Handle:hQuery;
    1.32  	decl String:query[256];
    1.33 @@ -655,7 +655,7 @@
    1.34  	decl String:flags[30];
    1.35  	decl String:safe_flags[64];
    1.36  	GetCmdArg(2, flags, sizeof(safe_flags));
    1.37 -	SQL_QuoteString(db, flags, safe_flags, sizeof(safe_flags));
    1.38 +	SQL_EscapeString(db, flags, safe_flags, sizeof(safe_flags));
    1.39  	
    1.40  	Format(query, 
    1.41  		sizeof(query),
    1.42 @@ -706,7 +706,7 @@
    1.43  	decl String:identity[65];
    1.44  	decl String:safe_identity[140];
    1.45  	GetCmdArg(2, identity, sizeof(identity));
    1.46 -	SQL_QuoteString(db, identity, safe_identity, sizeof(safe_identity));
    1.47 +	SQL_EscapeString(db, identity, safe_identity, sizeof(safe_identity));
    1.48  	
    1.49  	decl String:query[255];
    1.50  	Format(query, 
    1.51 @@ -798,7 +798,7 @@
    1.52  		return Plugin_Handled;
    1.53  	}
    1.54  	
    1.55 -	SQL_QuoteString(db, identity, safe_identity, sizeof(safe_identity));
    1.56 +	SQL_EscapeString(db, identity, safe_identity, sizeof(safe_identity));
    1.57  	
    1.58  	Format(query, sizeof(query), "SELECT id FROM sm_admins WHERE authtype = '%s' AND identity = '%s'", authtype, identity);
    1.59  	if ((hQuery = SQL_Query(db, query)) == INVALID_HANDLE)
    1.60 @@ -819,19 +819,19 @@
    1.61  	decl String:alias[64];
    1.62  	decl String:safe_alias[140];
    1.63  	GetCmdArg(1, alias, sizeof(alias));
    1.64 -	SQL_QuoteString(db, alias, safe_alias, sizeof(safe_alias));
    1.65 +	SQL_EscapeString(db, alias, safe_alias, sizeof(safe_alias));
    1.66  	
    1.67  	decl String:flags[30];
    1.68  	decl String:safe_flags[64];
    1.69  	GetCmdArg(4, flags, sizeof(flags));
    1.70 -	SQL_QuoteString(db, flags, safe_flags, sizeof(safe_flags));
    1.71 +	SQL_EscapeString(db, flags, safe_flags, sizeof(safe_flags));
    1.72  	
    1.73  	decl String:password[32];
    1.74  	decl String:safe_password[80];
    1.75  	if (args > 4)
    1.76  	{
    1.77  		GetCmdArg(5, password, sizeof(password));
    1.78 -		SQL_QuoteString(db, password, safe_password, sizeof(safe_password));
    1.79 +		SQL_EscapeString(db, password, safe_password, sizeof(safe_password));
    1.80  	} else {
    1.81  		safe_password[0] = '\0';
    1.82  	}