if(type == "account") { //NO SQL injection as name is escaped QueryResult *resultAccounts = loginDatabase.PQuery("SELECT `id` FROM `account` WHERE `username` = '%s'",nameOrIP.c_str()); if(!resultAccounts) return false; Field* fieldsAccount = resultAccounts->Fetch(); account = fieldsAccount->GetUInt32(); delete resultAccounts; } else if(type == "character") { normalizePlayerName(nameOrIP); //NO SQL injection as name is escaped QueryResult *resultAccounts = CharacterDatabase.PQuery("SELECT `account` FROM `character` WHERE `name` = '%s'",nameOrIP.c_str()); if(!resultAccounts) return false; Field* fieldsAccount = resultAccounts->Fetch(); account = fieldsAccount->GetUInt32(); delete resultAccounts; } // ------------------------------------------------ if(type == "account") { //NO SQL injection as name is escaped QueryResult *resultAccounts = loginDatabase.PQuery("SELECT `id` FROM `account` WHERE `username` = '%s'",nameOrIP.c_str()); } else if(type == "character") { normalizePlayerName(nameOrIP); //NO SQL injection as name is escaped QueryResult *resultAccounts = CharacterDatabase.PQuery("SELECT `account` FROM `character` WHERE `name` = '%s'",nameOrIP.c_str()); } if(!resultAccounts) return false; Field* fieldsAccount = resultAccounts->Fetch(); account = fieldsAccount->GetUInt32(); delete resultAccounts;