foin137 ca7588ec86 Prepare statements for sql queries, use (int) to avoid nonint inputs ...

The goal of this edit is to prevent sql injection.
For string inputs like player name -> prepare sql statements.
For other inputs that are integers -> cast to int via (int)

2020-04-05 18:16:30 +02:00

191 KiB

Raw Blame History

View Raw