Untitled

        if(type == "account")        {            //NO SQL injection as name is escaped            QueryResult *resultAccounts = loginDatabase.PQuery("SELECT `id` FROM `account` WHERE `username` = '%s'",nameOrIP.c_str());            if(!resultAccounts)                return false;            Field* fieldsAccount = resultAccounts->Fetch();            account = fieldsAccount->GetUInt32();            delete resultAccounts;        }        else if(type == "character")        {            normalizePlayerName(nameOrIP);            //NO SQL injection as name is escaped            QueryResult *resultAccounts = CharacterDatabase.PQuery("SELECT `account` FROM `character` WHERE `name` = '%s'",nameOrIP.c_str());            if(!resultAccounts)                return false;            Field* fieldsAccount = resultAccounts->Fetch();            account = fieldsAccount->GetUInt32();            delete resultAccounts;        }// ------------------------------------------------        if(type == "account")        {            //NO SQL injection as name is escaped            QueryResult *resultAccounts = loginDatabase.PQuery("SELECT `id` FROM `account` WHERE `username` = '%s'",nameOrIP.c_str());        }        else if(type == "character")        {            normalizePlayerName(nameOrIP);            //NO SQL injection as name is escaped            QueryResult *resultAccounts = CharacterDatabase.PQuery("SELECT `account` FROM `character` WHERE `name` = '%s'",nameOrIP.c_str());        }        if(!resultAccounts)            return false;        Field* fieldsAccount = resultAccounts->Fetch();        account = fieldsAccount->GetUInt32();        delete resultAccounts;