From: pk910 <philipp@zoelle1.de>
Date: Thu, 1 Sep 2011 12:57:46 +0000 (+0200)
Subject: do not pass args directly to the mysql query
X-Git-Tag: v5.3~463
X-Git-Url: http://git.pk910.de/?p=NeonServV5.git;a=commitdiff_plain;h=0e32981ced7aa8368c45ffd109a6145d303915bc

do not pass args directly to the mysql query
---

diff --git a/cmd_neonserv_set.c b/cmd_neonserv_set.c
index 0c93b55..432b3bb 100644
--- a/cmd_neonserv_set.c
+++ b/cmd_neonserv_set.c
@@ -232,6 +232,8 @@ static void neonserv_cmd_set_setting(struct ClientSocket *client, struct UserNod
                 reply(getTextBot(), user, "NS_SET_BADLEVEL");
                 return;
             }
+            sprintf(nameBuf, "%d", caccess);
+            args = nameBuf;
         }
         if(valid & NS_VALID_OPTIONS) {
             int options = atoi((char *) channel_settings[setting].parameter);