From d66054b183bc734b25d65a706142db5e2e9ed012 Mon Sep 17 00:00:00 2001 From: Tobin Rosenau Date: Thu, 14 Dec 2017 18:16:21 +0100 Subject: [PATCH] security fixes: prevent SQLInjection attacks --- Server.jar | Bin 6725809 -> 6725921 bytes src/Database.java | 66 ++++++++++++++++++++++++++++------------------ 2 files changed, 41 insertions(+), 25 deletions(-) diff --git a/Server.jar b/Server.jar index a3be40f39b218429bd78c051f2d6dcd18e36d80d..ef7f910b6bedef6ec6f68ffca0fe202f58dd3975 100755 GIT binary patch delta 4700 zcmY+|X*85!|G;r;NMp(_TV&sov4=#KjD2ij#y+weMp2kTS<2Sf$0U397+JGr-z!@Z z*&@541*!g5o)`b;nR7np_r0$(=RPy%+;8q*bw?I;?wc%Xh$)O`87G6RX`_$@5n`t2UYI9GBq_GnI3llI zPtswZwVaY3IHGJSw=zrF4%}{mHR6qzcIt7`g~Xq&JB>T)J5&4F`Er={i-H}%iEbYo@g zc5`*-E%xKFzK2KHo|x6RjliX8i;#HeE29s-jp5C5-!@T4;SA3&|>JleBpcX z0+wHkD!wpGr+MJqt>F65-0&y-GCx>Z`jh8E1wBkz;O_AU2Vd_eE6vi=xHP)r1W78% zCWG#FYcfp5jS9GOi{#ss!V2w4E+bO<6&UvXc*|+(c*^}TV(jIyinuSIG-a;Vmiz07 zAm!7LwZ6l)S4ZC53sWYftwmJ~3!SEgNRl-uKRe3sn>-0XxLXW*c=y4 z@+N7FDUu9u@wfRu(yS1w0^aT6f)2k$CGQxzvS{m~IzyCm?(xgTc?C{OagTb(rr~kO zrVP|aROH0h-G$$5(w|5qQ+Zv5@($ZHH6;`l?Sr=zvAUD;E0JExX)bz=%&pOK5x=jm9PG3diVl4!@Kr1{%Z@bm-F!*)sDM?MmW_82bTDsx-w6&8{|rq z`W(mOH9}K9k$2Yadwg=mT|EasYk6Z1VsdcR97iJR69>c8H@}fDBq=P;$ZwgtB{V_w zX(!uh-E`%E)o=Tcx`G98S2R>Tmj_FY8nrIF6g+Nb?#!&Ik#vw6{DE?RU8hm)@(8Uh zNcea&cPyyos$7=7J9EivGcnHJO&0aFQ+XVOu&+yE#0(jT-7cjfzPeLCfg`@PniV4Y zAo|6(TBAY%~Rb8vcnCv6Tua1JrTuM!+Xy=xO9z5LLvP3dDR-RTYcwaOa%>c1>rlXXlHIH+}MQHT8^#mKCj;nmJf*W^sA!+tOMP@B>T=aGP-#fwp2*0nv; zqq*7p_mW2M(+hg%Dh~(;mc?@p>OG8FVOh*W3aEQY?q+dz3;H^-)E7;5uB56I+O3@OO71$wcfoR z8^N9HF>EC5MUjn%<5M zcn$l7C4P`a%NJ$pZm3#5ZpKtWe=6(M949>b9U#;qg^{};!U)?-HnhpA%6n|5qb)YiqloVT{>~&Gw66LNYmQoADYI`>2!o|zJ zFV2`t{7H_cq|+)n5WO21fsZS0NG;P^vv^?y?e|p{>|NQQDwfwX(cqD2?Vx#-(dYhE z*0ort$&@U0hfRXkz2q7G@g}|W@V=U0R8i-dS7twXw}onP;-o=a@}<34CtH)xZn0Wy z)wV~t)bIgHyQZCL2JM6w(pzl|Lkud~_2XBQFq>(#zmp&ROGx?!o`Hv{~7rBzp zBF)M3M~D$bZ%p=cuHXUt;mM(6%?F}+MR*ZBN&M&TVxM`P!N6Ec0YQ?gq*rLQRIU56Rf@`oUa+y`TC{_aznt$s$S4=^k#P4?9 zgNx9?jhHj8haI85wGqozJc@gd_>g!0c+O_8UG+GC%`F(R4P`E-XXU?38)M1mIKk z-Z5A`Y;)ju8?4K9hl)Ev8+S{Bh^ozZh^1>QL7qhX`Zy_>n8-%lluxm1+(Ud>RGt_? z*L~kAo&TbfEdV?J_B!!}JCSjWLZMB?_IGPFV{uu8HQSe`gBkmhF@?;ATarCJ_H`MY zPT@Hv5jelUe-$P^T1lM^zHojg7W;EuE%LVIGo!6a`t*AO_Urdw=5H^=c}Ba%cc!L7 zOr~I)<<1Rxx22C(5^Nj_^!!k~lO{(vMkOPxD$*JH%duTQQPntDJpcKOo80MAo9l)( z{3Zb_vdNMBt6lMKw=vke0ZWGk0)AfQ_tsSF4biv+CH=~X<576*PkXW5Oq0_V2P#eN zNPB^)JPUmVQ)BpjO*JdJ8yj}s;Y#GC zM_*6BctBvJtatZA!pc|}ewOi8~ z=U00f>c#n2_9B124%$t4@QveUxme$V->%s{JpaJ%m{&nysJnL;6HbB*?lRcJOD2xC zF}^)+Xo;1jiHNr5H1h0*th4Z7OH%mC+bxkyDXt9xd;U8jJ|$kKb1Y0pkh}avyW+G& zL)^49mCyF%{FY%C`;^3JIJr+P@gDziMaPxG^?bf}%S_?nryWdR4#3He5e+8S2#Jf< zQf7t0Z<)QsG+blDAV($xuzOKCPHWCpnRt<+qa9M{H`5K;20 z`K#%13a#C8>P85B;;3j=tGJP;II~M-;Ae6NBND?Gdg{$)^V4csSbiY*_^ zPfXA1?JUD=dRX1(C24L8>$mu>+}S*YGC3D!9}8WW=Qj+Esc+&iTJWKI$C|(x`!eFD zuR^oLF>bw7cR}UW8&rz*dvipEK(>LuMN+X_#Es^sS-ep*MDNlvn^I_X$?YW``(dji zSvz;==fCueQnNIJb@=|QQ@H8b+n7Qjc(*o7Sf8Bax7IN!(&HUfM6+gu_s~!dvEBT~ zL10^|`Y11UbQ?1(L2}RcCfuu&S3LbHMX#~d>>!gfU`tt8QWBx%a$B8b+d{GpBiT;e ztbmZ3eKTh7bUOH>V9nE4%cccIpwsPWk)3ezxZ0)68#S>yMyPkoIB_$4;vxq;bXnXC z0qKqu*4RsVQIfXUc@pB9WdGPiHDS-v;#&v=wGJU`MZU4Pv0o{Y;5{=o!P!?AMmkSB zUFT=HbYbSlmZy;G4C+OXR^3*&r##5g9__lVFP_&yio@Q;D&h-QhFrxHht0Rj!Q-2i z52JL$v6XFSvOb&F*Jq@v$n!LzPa|>EbiZ{Mw~W+6 z!sFZ<2qDI^@Qj9s$3c>c3$VULMY(tG7=DdtcmFFY^Gplf#Kkk4EE~Ha$wJ|Y^Ne|# zUBq^EXVGo8DaW=0&Q_ty?l9*|Ofg{xHOiVeY)+STpCL46)!+1W1YNh8n$TRkb+=ux z4aUj*W<;mK6+X+lc}(Gb(G+fSK>&pV;#tpBsx=wn{0>&B6FeEjw2cXxSFvUtZB|^M zokEB928pAv!n;qs&VCM>y`PR$TDT{2px)mXV3(xsgzI4)1!U9}`Yy-M^qxX{FXX zq@OU>CHe1+5|iRBs#0nE`dS^H$NJKo;0!M;b65vlC`DIiyHQp5(kvC{wGXEvmS$?|{R zn4U#3UJ&x8Zr#WvYvkR+ndSjF5XKgezx%1 zlfW6UoSlDZY@#{e#XxUi+}_M2m!VtzHq=Ipu48bQPaLY1HpMm{9eQ+58mE_;XFV-* zHTOsH>xScOx<-fHz8`SD5!C9!1_UJ+{t#L-X@C(p13&;K01BK1&H>B-3&0An0qg(=zzJ{x=K*ej2jB(x0Dj;CAOHvg7Xcwa z7!UzO0Wm-vkN_kBDL@*K0WJZuz-2%V`1fDr0R=!2Py&F`{TbTlB&UoN^&#WZ6(ikCBn(6p6cj`gweg8p z`Y!z)KR7SOvB2Mv#78W0F-?hK7c-Vv_3y0tN*oKh2pf_S;){?bi=n)THX55t7r{wC z_1`#y7C|n3sEV&CX4xaYh-@})%1gE2{vUX`u$F;AaF_Iu)};4YdIP-ug-pZiYxdgr z1jN2gbW^I2peLdX`1#UOO{}ET<+Y2`zZ6O*4MQC&(illmCCQl(vy%L~Vi~gSJVl{J zp`(w-7@-m((CPi^g?}2GY)S{845V92jn1OZCyM)<39Yk71A+cCKTlh80ti(C#BZP> zSUCpb$H6cr_Bg~9x$BS`KaD4v7W@UJ^C{Eex8p4h+8_J#r1aWw8;wp?o3+zV&`W=O z6oVFC*Lc^?Lx@oeSdLN~jxKz}HcVfNafoM=fuQ;%)(l+)KK6{HXVKCWIj&)NWZ;%U zbE{fCS7^$N%0E!1vDJ{&4o{mMl6XAQzz#F(ye1QHydkm>&hgEm4t__|-r!NgY6wca zb93@R-6uu@3?8cS(Q!lD`H_`$s%N1?SXAWjT)a!1+dwq)SRa!=*IUa@x&{&tQC&N< z(Z6X6_vB6>SNz))ny6{rFwcT=ky#Q0`z!fXL#=u+gb}?#VO($5cy6L(J?&292)4@Y zp(iZq#jJPH4Y`-Oo;g0PJl+tUpcmXY-5RcUAB*B-;UCCZTUN@O@)uX?gw2P;&S0)xK|p{{8S9@2XE-|0WEbzi6jhnbx|ZVOr3b z$f6^Flh)vo&8J}#;KxOoXbgnMucDnywfA)ozWNk(N|XEjd7A-&Si2{#5!UEPp5Op%A))NdC^x{~Qz6MQkG$;op2hFo zKwefhA=8_Ut1*GGvvTSJ)uq^&D#;tBM&8=4kF;+jPBO7;LzAb|;VN~(*$3lMt2yo& z`a}1FQ0WF^`(a-#VTo}cr8Q(dFRz+R51WT8dp$0|SHPrgSnK9Jp7xD9b@4ycILBl~ z5x%Ovo?2tQa@%=b!Kn}Z{Y6oeMz1iuF5h`T2%V4=qIuDe?LkyI&QJLX|fxb0NyPxKeV(+cv)Yuphj*Td=sO zAuRs&4-+O&6uDJTv+cWx{SzejN>?YEK*myxbMUL`)hiELo^``i-YTq6eSIrk$PR8JMvTOAC-#qO)(ms!PV|? z(R;4KuNMdr@%mSPy+4*w3{{Ow^;_>BX-C^${+cdP73=S4yz8>%RTCSFv;56dRDy|6 zN&6KOTUjl|OV9XR3Y+Jmm%p%%F1dR{IN>2Y%_llmXv{6s8aqZq$*>UqU+&1&`VpRbqut9bzkY_-+#l>y_lrnf;l(wyF&E#_nidLJ zn0-0rT7fYRaeDQ=9#y4wR&6PETEDCu87ekCTeE%2XKX!zy@oCMofd^GZ4+2*P=W3p zv)ZN#aB6-U?_4^Q4trSfE$Jvk>uvpW9gN|P+sawX{)M~EF$+)i>fU^aeYHeQcQPil z)~my%YVaebK+2OZ4#O5yYb8NC>igzLDI6)DAB=_#YTo&_4CEJ+j6+QVi)0= zr3kC!0sh!{=!m+HH+PQA1^k*Qi4n%PeZgpzI=%XkTI!mD%SE3du2XsiH!ix#f6^5^1-*}I&64E8-qj==3jcZ%JleH9a8+WQ-SY_S~eXQ z{kn{85~g#@zE}CwJ50!nDfi3V`2L_MRRAXN3x;iG2O0q+;!Dof>Ny;y!<6U zK0nuZSR{m2rK5eY(`S|W=_tV*jZQ<%>t@)*GX16BJ*&7%Y3f$kfO+Z zz2)bsUP^lD+sxN|AzRiTTu~oOQbc=#woC`T>wBI1ET1o=YPk=mTIkOgP!%tW&mAu@ zC>L?9y6v;u^VFGD_;S$M;TO?U)Q08TS4;ndn!*%_+ni2!-_1c?uakaAfaxO1)KX7PSx34#p}O{7~<18$`dgfpdn7;?1~f zq;fXZg@2|u;n!!hX`-tQP0;i!z7MsT-{O>dX4`!VeYLbcCtf6k7wCI}OCK{iNU=KQ zB=fA=9)XJ*@8^Fh>u<%X^w=3xj(&Ab&swg=pZD4o`wT!?BLua~Nc*f_Op%s0a*Z#ofNhcnUTGn6OQtnazC+);5u|*fAKycnJ#@rm-8BqLTVH)(`7&8jGb#W3X z#L*|+ENyu3n8CXmuRg?o{6|AGadUcPe5Q`QvTLmlyQ#)!Qtv%z?)Z4}pkJpJIhj-0 zwO+Rwsndm=v@Pq}sM|#IdDMH)3i%xCW%eEKkND5J6GGTT4s~n^|9;6quLKUu*9c^f z1enN{_MO-+%PuF}vkrN_aWyE}n;^Mxy14X@wSVj}!=NgDC4F1ktNKzFc|CyvO>Rvv z@anO_E=@K4$if$)$tx%77el60quQ8ozMLFbCl zJE(Y&`nM!8rUi$g2+c0x>rhW$HLsqrE)xE3fj&IVyyUK8&NbH^UV(PgPdthh&Fq7M zrx=4Dk;lpFz9#;641_p8P=6BG$$!XZYqHgWbzdfFtx&{mXWZXqxZ!ZVQu;I-ZYafN zCiwc-{k*K&(vI?=&Mca%QxY>be}*U7wjc+{nGBwV^Y=IGQVDdkJQB{DFT_k|QMJt% z9;VAP4m>pJJu>RlT`7_0gc%QNbN>vt5M3&KLC7k}6I*;(L|scP>v5xtYc_&m!gbin<)BAycO_V!TkNAI|YyjYpqTMd$TbUaS@v1C&# zr}#b>75)5jl`nODZ&bc4Z{Jn%5YwWw@gK5cuu&hfVHnM~v|&&x#)K&)G{-+E7|YO% z&!7xk8`*wCLw}Y=*5ZE{=-M%hwWc~JlRUqv>UoX2UxM0&tzk#h06LM2>p{;QpBzYu z-LdZo(b_qQCM@h&0SZdL~$r$S5OXGb#(U| zH~6de42^WjDS~uYz8794B8p%qBKm)y)#0=-94(9(fB=^O5`YvS1IPgifD)hrsDaDC z72qmB16%`W0Xl#lU;r2aD8K|T11tb5zy@3g*Z~fJ6W{{40UqE6zzgsJ{D1%;2nYef zfCwN8hymh&1aK3O1f&3I;P3Ou0J4A_a0`$J6oA`+BA^5)19yPCfC_LAPzBTgbwC5q z1hfEcKnKtT^Z3= z)52Ud!~U))>aE|oxUKxHw2zsHi_J#b