Anti-injections

[Zeca]

Dami si mie anti-injections pentru clan tag!

[Reset]

%S?

[Zeca]

da

[AlexxAdv]

Adauga la inceputul gm-ului

static const antisqlinjection[][] =
{
    "'",
    "#",
    "`",
    "%s",
    "%d",
    "%f",
    "%h",
    "h%"
};

 

adauga la public OnDialogResponse

 

if(strfind(inputtext, "%", true) != -1)
    { 
        SendClientMessage(playerid, COLOR_GENANNOUNCE, "SERVER: Invalid dialog input. You can't use %%.");
        ShowPlayerDialog(playerid, dialogid, DIALOG_STYLE_INPUT, "Invalid dialog input", "Invalid dialog input", "OK", "Exit");
        return 1;
    }
    for(new i; i < sizeof(antisqlinjection); i++)
    {
        if(strfind(inputtext, antisqlinjection, true) != -1)
        {
            SCM(playerid, -1, "Nu sunt permise asemenea caractere.");
            return 1;
        }
    }

 

iar ca public si forward

 

forward CheckCharacters(string[]);
public CheckCharacters(string[])
{
    for(new i; i < sizeof(antisqlinjection); i++)
    {
        if(strfind(string, antisqlinjection, true) != -1)
        {
            return 1;
        }
    }
    return 0;
}

 

[Lunoxx]

Sau poti pur si simplu sa cauti caracterul `%` in inputtext la OnDialogResponse si sa-l elimini daca e gasit sau sa returnezi un mesaj..