rare error console

[crashwan]

Rare error, which is a problem?

[15/10/2012 2:19:6] Fgdfgd has logged out.
[15/10/2012 2:19:6] Captain Morgan's has logged in.
[15/10/2012 2:19:6] mysql_real_query(): UPDATE `players` SET `ip` = '200.83.188.247' WHERE name = 'Captain Morgan's'; - MYSQL ERROR: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's'' at line 1 (1064)
[15/10/2012 2:19:8] Gdfgd has logged in.
[15/10/2012 2:23:37] > Broadcasted messag

Uploaded with ImageShack.us

 

[Summ]

Either the ' symbol should not be allowed in names or you need to escape string the name in the sources..

Which version are you using? (Server version and name)

 

[crashwan]

otx 2.4 (ver 8.6)

 

[Znote]

edit: Ye, as Summ says.

Stupid me re-inventing the weel. :|

 

[Summ]

Are you using a script to update the ip?
I could not find a line in sources which says WHERE name = , only WHERE `name` = so I guess it is a script.

Just use: db.escapeString(user_input)
So ->

bla .. " WHERE name = " .. db.escapeString(playerName) .. ";"