Fixed security vulnerability

This commit is contained in:
ElPumpo
2019-02-22 18:35:18 +01:00
parent 630d52c489
commit 0014a76884
+6 -1
View File
@@ -285,8 +285,13 @@ RegisterServerEvent('esx_ambulancejob:setDeathStatus')
AddEventHandler('esx_ambulancejob:setDeathStatus', function(isDead)
local identifier = GetPlayerIdentifiers(source)[1]
if type(isDead) ~= 'boolean' then
print(('esx_ambulancejob: %s attempted to parse something else than a boolean to setDeathStatus!'):format(identifier))
return
end
MySQL.Sync.execute('UPDATE users SET is_dead = @isDead WHERE identifier = @identifier', {
['@identifier'] = identifier,
['@isDead'] = isDead
['@isDead'] = isDead
})
end)