Harden SQL input handling and fix unban log consistency in KnockbackRestrict

[Rushaway]

Summary

This PR improves SQL safety across the plugin by escaping all user-influenced string inputs before query formatting, and fixes inconsistencies in unban logging behavior.

What Changed

• Updated Kban_PublishKunban to actually use the unban reason in KbRestrict_srvlogs.message:
  • From static message: Removed Kban
  • To: Removed Kban (Reason: %s) (escaped)
• Added missing SQL escaping in multiple query paths for sensitive fields:
  • client_steamid
  • client_ip
  • admin_steamid
  • map
  • log message
• Hardened VerifyKbanClient by escaping SteamID/IP before SELECT and UPDATE queries.
• Hardened Kban_AddBan and Kban_AddOfflineBan by escaping additional DB-bound fields, not only names/reason.
• Hardened OnKbanAdded lookup query by escaping SteamID/IP in WHERE.
• Fixed offline unban update path in helpers/menus.sp:
  • Corrected reason_removed assignment.
  • Added missing WHERE clause to avoid broad updates.
  • Escaped admin SteamID, reason, target SteamID, and IP before query use.

Why

• Some DB queries previously used dynamic strings without explicit escaping.
• One menu-based unban query had an incomplete UPDATE statement and no WHERE, which was risky.
• Kban_PublishKunban escaped reason but did not use it in SQL logs, creating a logic mismatch.

Impact

• Improves protection against malformed or malicious input in SQL statements.
• Preserves existing functionality while making logs more informative and consistent.
• Reduces risk of accidental mass updates in offline unban flow.

[Rushaway]

@Dolly132

[Copilot]

Pull request overview

This PR hardens SQL input handling in the KnockbackRestrict SourceMod plugin by expanding DB string escaping across several query paths, and it improves unban log consistency by including the unban reason in server logs.

Changes:

• Escapes additional DB-bound fields (SteamID, IP, map, message) in multiple query/insert/update paths to reduce SQL injection/malformed input risk.
• Updates unban logging (KbRestrict_srvlogs.message) to include the (escaped) unban reason.
• Fixes the offline unban menu UPDATE to correctly set reason_removed and adds a missing WHERE clause to prevent broad updates.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
addons/sourcemod/scripting/KnockbackRestrict.sp	Adds escaping for more query inputs; includes unban reason in srvlogs; hardens verification and post-insert lookups.
addons/sourcemod/scripting/include/KnockbackRestrict.inc	Bumps patch version from 4.0.7 to 4.0.8.
addons/sourcemod/scripting/helpers/menus.sp	Fixes offline unban UPDATE correctness (reason assignment + WHERE) and escapes added parameters.