stopped lisp symbols as values from being able to inject sql (SECURITY BUG)

[clsql.git] / sql / generic-odbc.lisp

diff --git a/sql/generic-odbc.lisp b/sql/generic-odbc.lisp
index e4c37529f2e07a32778f46fe01b3ffa0d1c0e331..bd4d01cda033156bd6c0ff4aa0e6346cfca2a819 100644 (file)
--- a/sql/generic-odbc.lisp
+++ b/sql/generic-odbc.lisp
@@ -76,10 +76,11 @@
                                         (db-type (eql :mssql)))
   (declare (ignore args database))
   "DATETIME")
+
 (defmethod database-get-type-specifier ((type (eql 'date)) args database
                                         (db-type (eql :mssql)))
   (declare (ignore args database))
-  "DATETIME")
+  "SMALLDATETIME")
 
 (defmethod database-get-type-specifier ((type (eql 'boolean)) args database
                                         (db-type (eql :mssql)))