Commit 6202187c authored by jan.koester's avatar jan.koester
Browse files

fixed injection

parent ec08972b

src/database.cpp

+1 −3
Original line number Diff line number Diff line
@@ -68,12 +68,10 @@ const char* blogi::SQL::escaped(std::vector<char> &buf,const char *text){ 


    buf.clear();



    const char *del="\\'";



    size_t tlen=strlen(text);

    for(size_t i = 0; i < tlen; ++i){

        if(text[i]=='\''){

            std::copy(del,del+3,std::back_inserter(buf));

            buf.push_back('\'');

        }

        buf.push_back(text[i]);

    }