Fix injection

2013-04-18 22:58:21 +04:00 · 2013-04-18 22:58:21 +04:00 · 400614a8c9
parent 97e1b7eef0
commit 400614a8c9
1 changed files with 1 additions and 1 deletions
--- a/lib/mysql.js
+++ b/lib/mysql.js
@ -178,7 +178,7 @@ MySQL.prototype.toDatabase = function (prop, val) {
        }
    }
    if (!prop) return val;
-    if (prop.type.name === 'Number') return val;
+    if (prop.type.name === 'Number') return Number(val);
    if (prop.type.name === 'Date') {
        if (!val) return 'NULL';
        if (!val.toUTCString) {