Joururi/spellsaurus
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Added escape methods to queries for spells and schools

Browse Source
This commit is contained in:
Alexis
2020-05-16 16:46:44 +02:00
parent 8468fe235a
commit cf0a50efa3
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
routes/schools.js
View File

@@ -34,7 +34,7 @@ const getSchools = () => {
const getSchool = (id) => {
let getSchoolPromise = new Promise((resolve, reject) => {
let query = "SELECT * FROM school WHERE id = " + id
let query = "SELECT * FROM school WHERE id = " + db.escapeId(id)
db.query(query, async (err, result) => {
if (err) return reject
@@ -100,7 +100,7 @@ const buildSchool = async (school) => {
let query =
"SELECT ms.id, ms.name " +
"FROM meta_school AS ms " +
"WHERE ms.id = " + school.id_meta_school
"WHERE ms.id = " + db.escapeId(school.id_meta_school)
db.query(query, (err, result) => {
if (err) return reject