Просмотр поста

Ай ай ай :

/1302444474anketa/str/anketa.php $message
366: if (mysql_result(mysql_query("SELECT COUNT(*) FROM `wall` WHERE `user_id` = '$user[id]' AND `message` = '".mysql_escape_string($message)."' AND `time` > '".($time - 300)."' LIMIT 1"), 0) != 0) $err .= '�а�е �ооб�ение пов�о��е� п�ед�д��ее<br/>'; SQL Injection!
/1302444474anketa/str/anketa.php $message
489: if (mysql_result(mysql_query("SELECT COUNT(*) FROM `wall` WHERE `user_id` = '$user_id' AND `message` = '".mysql_escape_string($message)."' AND `time` > '".($time - 300)."' LIMIT 1"), 0) != 0) $err .= '�а�е �ооб�ение пов�о��е� п�ед�д��ее<br/>';