szporwolik/perun

SQL injection from Ingame user name

faaanbingbing opened this issue · 2 comments

User name example:

'; select * from users;--

etc...

Hmn, I was sure that there is some DCS functionality to prevent this from happening.
Thanks for information, will include some protection in the next release.

@faaanbingbing this was fixed in c36befd

I will release 0.9.3 with the fix.

Thank you again!