fix: escape 'key' as reserved word in all MySQL queries with backticks

2026-06-20 23:21:24 +08:00
parent 99fb89c60d
commit 735126ff56
7 changed files with 22 additions and 22 deletions
@@ -126,7 +126,7 @@ func (h *AuthHandler) HandleRegister(c *gin.Context) {

 	// Seed default settings for the user
 	for key, val := range defaultUserSettings {
-		h.db.Exec(`INSERT IGNORE INTO user_settings (user_id, key, value) VALUES (?, ?, ?)`, userID, key, val)
+		h.db.Exec("INSERT IGNORE INTO user_settings (user_id, `key`, value) VALUES (?, ?, ?)", userID, key, val)
 	}

 	// Auto-login: set session