From aa17f013c1f22a73c562fe9630437b64fe93b341 Mon Sep 17 00:00:00 2001 From: James Puleo Date: Wed, 5 Oct 2022 07:19:19 -0400 Subject: [PATCH 1/2] Use a string interpolation and escape single quotes when escaping tables --- TShockAPI/DB/IQueryBuilder.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/TShockAPI/DB/IQueryBuilder.cs b/TShockAPI/DB/IQueryBuilder.cs index 19af36a9..03f67202 100644 --- a/TShockAPI/DB/IQueryBuilder.cs +++ b/TShockAPI/DB/IQueryBuilder.cs @@ -172,7 +172,7 @@ namespace TShockAPI.DB /// protected override string EscapeTableName(string table) { - return table.SFormat("'{0}'", table); + return $"\'{table}\'"; } } From 6eadc1159d429da2e25d474959751c6267e081f0 Mon Sep 17 00:00:00 2001 From: James Puleo Date: Wed, 5 Oct 2022 13:57:08 -0400 Subject: [PATCH 2/2] Update CHANGELOG.md --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index bd7736bb..f89e26be 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -22,6 +22,7 @@ This is the rolling changelog for TShock for Terraria. Use past tense when addin * Added preliminary support for Terraria 1.4.4.4. (@SignatureBeef) * GrassSpreadEventArgs Color property has been changed from a Byte to a TileColorCache type. (@SignatureBeef) * SetDefaultsEventArgs now includes a nullable ItemVariant instance. (@SignatureBeef) +* Use a string interpolation and escape single quotes when escaping tables (@drunderscore) ## TShock 4.5.18 * Fixed `TSPlayer.GiveItem` not working if the player is in lava. (@gohjoseph)