ZoneMinder
/
zoneminder
mirror of https://github.com/ZoneMinder/zoneminder.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

use the size of the username and password when calling mysql_escape_string

pull/451/head
Isaac Connor 2014-06-25 16:23:10 -04:00
parent 79b7792466
commit 20bccdf431
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/zm_user.cpp
View File

@ -102,10 +102,10 @@ User *zmLoadUser( const char *username, const char *password )
char sql[ZM_SQL_SML_BUFSIZ] = "";
char safer_username[65]; // current db username size is 32
char safer_password[129]; // current db password size is 64
// According to docs, size of safer_whatever must be 2*length+1 due to unicode conversions + null terminator.
mysql_real_escape_string(&dbconn, safer_username, username, 32 );
mysql_real_escape_string(&dbconn, safer_password, password, 64 );
mysql_real_escape_string(&dbconn, safer_username, username, sizeof( username ) );
mysql_real_escape_string(&dbconn, safer_password, password, sizeof( password ) );
if ( password )
{