ivancraft623 / ranks Goto Github PK
View Code? Open in Web Editor NEWA pocketmine plugin that implements Temp Ranks in your server! with conjuction of PurePerms
License: GNU General Public License v3.0
A pocketmine plugin that implements Temp Ranks in your server! with conjuction of PurePerms
License: GNU General Public License v3.0
Dear plugin developer,
We have updated the Poggit plugin rules, and your plugin Ranksk appears to be affected.
The new rule is as follows:
B8: SQL parameters must be escaped
Data must NEVER be interpolated into SQL strings using interpolation, unless they are explicitly escaped using the
mysqli::escape_string
/SQLite3::escapeString
function. No exceptions even if you are sure they are integers, player names or validated otherwise. Using libasynql or usingbind_param()
/bindValue()
would be even better.
We detected the following line of code from your plugin that seems to breach the rule:
$rankInfo2 = $this->db->query("SELECT * FROM rankPlayers WHERE player = '$playerName2';"
You are required to update the code to conform to the rules in 14 days. Otherwise, your plugin may be removed from Poggit and a security advisory will be issued to recommend users to remove your plugin.
A simple fix is to use SQLite3::escapeString
or mysqli::real_escape_string
to escape your data, but we recommend that you use SQLite3::prepare()
and bindValue
or mysqli::prepare()
and bind_param
instead. Even better, we recommend that you migrate to libasynql, although this is not a strict requirement. (But async database access may become a strict requirement in the future).
Shall you have any enquiries, please post your question on the #poggit
channel on the PMMP Community Discord.
Best regards,
SOFe
Poggit Team
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.