]> jfr.im git - irc/UndernetIRC/gnuworld.git/commitdiff
mod.cservice: channellog inserts not escaping nickuserhost
authorGNUWorld <redacted>
Thu, 1 Aug 2019 12:02:07 +0000 (05:02 -0700)
committerGNUWorld <redacted>
Thu, 1 Aug 2019 12:02:07 +0000 (05:02 -0700)
mod.cservice/cservice.cc

index b48fd28f0e25614f2962f90b075c29d01c7ccfee..2fdfefdd75100fa510ae0649f76f29d85744da7d 100644 (file)
@@ -6871,7 +6871,7 @@ theLog    << "INSERT INTO channellog (ts, channelID, event, message, "
        << "'["
        << nickName
        << "]: "
-       << theClient->getNickUserHost()
+       << escapeSQLChars(theClient->getNickUserHost())
        << " (" << userExtra << ") "
        << escapeSQLChars(theMessage)
        << "', "