ZoneMinder
/
zoneminder
mirror of https://github.com/ZoneMinder/zoneminder.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix mysql_escape_string calls after referring to docs

pull/445/head
Isaac Connor 2014-06-24 11:22:08 -04:00
parent 0f4e9eb3e4
commit 0592276f53
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/zm_user.cpp
View File

@ -100,10 +100,12 @@ bool User::canAccess( int monitor_id )
User *zmLoadUser( const char *username, const char *password )
{
char sql[ZM_SQL_SML_BUFSIZ] = "";
char safer_username[200];
char safer_password[200];
mysql_real_escape_string(&dbconn, safer_username, username, sizeof safer_username);
mysql_real_escape_string(&dbconn, safer_password, password, sizeof safer_password);
char safer_username[65]; // current db username size is 32
char safer_password[129]; // current db password size is 64
// According to docs, size of safer_whatever must be 2*length+1 due to unicode conversions + null terminator.
mysql_real_escape_string(&dbconn, safer_username, username, 32 );
mysql_real_escape_string(&dbconn, safer_password, password, 64 );
if ( password )
{