From 5c4a5f8045a8f1de282daab156faf8c17e363f3e Mon Sep 17 00:00:00 2001
From: mrfry <mrfry@airmail.cc>
Date: Mon, 12 Oct 2020 17:29:46 +0200
Subject: [PATCH] SQL thingy fix, oops

---
 src/modules/api/api.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/modules/api/api.js b/src/modules/api/api.js
index 583af3f..489f2ad 100644
--- a/src/modules/api/api.js
+++ b/src/modules/api/api.js
@@ -392,7 +392,9 @@ function GetApp() {
 
   app.post('/login', (req, res) => {
     logger.LogReq(req)
-    const pw = req.body.pw || false
+    const pw = req.body.pw
+      ? req.body.pw.replace("'", '').replace('"', '')
+      : false
     const cid = req.body.cid
     const isScript = req.body.script
     const ip = req.headers['cf-connecting-ip'] || req.connection.remoteAddress