fix(Scripts/Commands): escape string before query on go creature command (#23036)

This commit is contained in:
Alwin Arrasyid
2025-10-01 09:50:34 +07:00
committed by GitHub
parent a56d1f65aa
commit 0e6a5e4efb

View File

@@ -137,10 +137,7 @@ public:
// Make sure we don't pass double quotes into the SQL query. Otherwise it causes a MySQL error
std::string str = name.data(); // Making subtractions to the last character does not with in string_view
if (str.front() == '"')
str = str.substr(1);
if (str.back() == '"')
str = str.substr(0, str.size() - 1);
WorldDatabase.EscapeString(str);
QueryResult result = WorldDatabase.Query("SELECT entry FROM creature_template WHERE name = \"{}\" LIMIT 1", str);
if (!result)