Quote:
Originally Posted by jimbona
It might just be me, but reviewing the source it seems its open to injection via _GET and _POST data as it is loaded directly into the SQL queries so hackers will have a field day with this like other free scripts with uncleansed data to SQL.
|
sorry it is, I was using a REALLY old codebase of mine. I'll have that fixed up in like 20 minutes or so ;)