forked from LogBlock/LogBlock
fix player names with underscore
This commit is contained in:
@ -436,19 +436,19 @@ public final class QueryParams implements Cloneable {
|
||||
if (!excludePlayersMode) {
|
||||
where.append('(');
|
||||
for (final String killerName : players) {
|
||||
where.append("killers.playername = '").append(SqlUtil.escapeString(killerName, true)).append("' OR ");
|
||||
where.append("killers.playername = '").append(SqlUtil.escapeString(killerName)).append("' OR ");
|
||||
}
|
||||
for (final String victimName : players) {
|
||||
where.append("victims.playername = '").append(SqlUtil.escapeString(victimName, true)).append("' OR ");
|
||||
where.append("victims.playername = '").append(SqlUtil.escapeString(victimName)).append("' OR ");
|
||||
}
|
||||
where.delete(where.length() - 4, where.length());
|
||||
where.append(") AND ");
|
||||
} else {
|
||||
for (final String killerName : players) {
|
||||
where.append("killers.playername != '").append(SqlUtil.escapeString(killerName, true)).append("' AND ");
|
||||
where.append("killers.playername != '").append(SqlUtil.escapeString(killerName)).append("' AND ");
|
||||
}
|
||||
for (final String victimName : players) {
|
||||
where.append("victims.playername != '").append(SqlUtil.escapeString(victimName, true)).append("' AND ");
|
||||
where.append("victims.playername != '").append(SqlUtil.escapeString(victimName)).append("' AND ");
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -614,13 +614,13 @@ public final class QueryParams implements Cloneable {
|
||||
if (!excludePlayersMode) {
|
||||
where.append('(');
|
||||
for (final String playerName : players) {
|
||||
where.append("playername = '").append(SqlUtil.escapeString(playerName, true)).append("' OR ");
|
||||
where.append("playername = '").append(SqlUtil.escapeString(playerName)).append("' OR ");
|
||||
}
|
||||
where.delete(where.length() - 4, where.length());
|
||||
where.append(") AND ");
|
||||
} else {
|
||||
for (final String playerName : players) {
|
||||
where.append("playername != '").append(SqlUtil.escapeString(playerName, true)).append("' AND ");
|
||||
where.append("playername != '").append(SqlUtil.escapeString(playerName)).append("' AND ");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user