albert/mrfrys-node-server
1
0
Fork 0
mirror of https://gitlab.com/MrFry/mrfrys-node-server synced 2025-04-01 20:24:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Sql injection fixes

Browse source
This commit is contained in:
mrfry 2022-03-20 08:01:10 +01:00
parent 799930b3e1
commit 3fe01eec9b
3 changed files with 12 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/modules/api/submodules/chat.ts
View file

@ -131,7 +131,7 @@ function setup(data: SubmoduleData): void {
const msgObj = {
sender: userid,
reciever: parseInt(reciever),
msg: msg.replace(/'/g, '').replace(/;/g, ''),
msg: dbtools.sanitizeQuery(msg),
type: type || 'text',
date: new Date().getTime(),
unread: 1,