fix(lib): ensure safeArgs when using __call method

This asserts types and checks stored queries when sending a number.
overextended · Dec 23, 2021 · e86bf26 · e86bf26
1 parent fc06cab
commit e86bf26
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/MySQL.lua b/lib/MySQL.lua
@@ -69,7 +69,9 @@ setmetatable(MySQL, {
 		local state = GetResourceState('oxmysql')
 		if state == 'started' or state == 'starting' then
 			self[method] = setmetatable({}, {
-				__call = oxmysql[method],
+				__call = function(_, query, parameters, cb)
+					return oxmysql[method](nil, safeArgs(query, parameters, cb))
+				end,
 				__index = function(_, await)
 					assert(await == 'await', ('unable to index MySQL.%s.%s, expected .await'):format(method, await))
 					self[method].await = function(query, parameters)