do not pass args directly to the mysql query

diff --git a/cmd_neonserv_set.c b/cmd_neonserv_set.c
index 0c93b559a11f423da07c4374ec29249e8acd42c8..432b3bb5623b49481fdd05d4173fcced0a16e91b 100644 (file)
--- a/cmd_neonserv_set.c
+++ b/cmd_neonserv_set.c
@@ -232,6 +232,8 @@ static void neonserv_cmd_set_setting(struct ClientSocket *client, struct UserNod
                 reply(getTextBot(), user, "NS_SET_BADLEVEL");
                 return;
             }
+            sprintf(nameBuf, "%d", caccess);
+            args = nameBuf;
         }
         if(valid & NS_VALID_OPTIONS) {
             int options = atoi((char *) channel_settings[setting].parameter);