Prevent SQL Injection for infractions database

ItsDrike / CommandBot

Discord Bot which can handle most administrative tasks for servers.

Other

0 stars 0 forks source link

Prevent SQL Injection for infractions database #22

Closed ItsDrike closed 4 years ago

ItsDrike commented 4 years ago

The bot/utils/infractions.py is currently using f-strings to write to the database, which is very unsafe and can be abused with SQL Injection attack, this should be fixed to prevent any unwanted database tempering

This needs to be fixed ASAP

ItsDrike commented 4 years ago

Issue closed in #23