Originally Posted by roly

A big thanks for everyones input its a huge help

I've got a lot of sites using variations of this (very old) script, its not suported anymore and i don't have the time to find an alternative and switch to that. so i've just got to try and patch it up as best as possible. they were using something along the lines of this to hack the script:

so if i implement some of the recommendations above and also remove union, select, etc as well, hopefully i should be a bit safer.