Changeset 38 for dev/common/admin_sync.php

Timestamp:

10/26/06 14:44:15 (14 years ago)

Author:

exi

Message:

Changed alliance pictures to work like the corp-ones (eg: upload ALLIANCE_ID.jpg to img/alliances/)
Fixed Security Issue in Server Synchronization

Files:

• dev/common/admin_sync.php (modified) (1 diff)

dev/common/admin_sync.php

@@ -97 +97 @@
         for ($i = 0; $i<$results; $i++)
         {
-            $update->execute("update kb3_pilots set plt_externalid='".$matches[2][$i]."' where plt_name='".$matches[1][$i]."'");
+            $update->execute("update kb3_pilots set plt_externalid='".$matches[2][$i]."' where plt_name='".addslashes($matches[1][$i])."' limit 1");
         }
         $html .= "Synchronization complete, got $results new ids from server running version ".$version[0].'.'.$version[1].'.'.$version[2].'.<br>';