From 695f113f13065edcb7300972c1b3091cefb8dfc5 Mon Sep 17 00:00:00 2001
From: Sean Edmunds <smedmunds226@gmail.com>
Date: Sat, 7 Jun 2025 20:23:58 -0500
Subject: [PATCH] Escaped strings

---
 server.cjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.cjs b/server.cjs
index 492ac34..2f26365 100644
--- a/server.cjs
+++ b/server.cjs
@@ -369,7 +369,7 @@ app.get("/trigger/api/providers", async (req, res) => {
 
 app.post("/trigger/api/providers", async (req, res) => {
 	const conn = await pool.getConnection();
-	const query = `INSERT INTO trigger_database.providers (name, url, prefix) VALUES (${escapeString(req.body.name)}, ${req.body.url}, ${req.body.prefix})`;
+	const query = `INSERT INTO trigger_database.providers (name, url, prefix) VALUES (${escapeString(req.body.name)}, ${escapeString(req.body.url)}, ${escapeString(req.body.prefix)})`;
 	conn
 		.query(query)
 		.then((rows) => {