Ksecurity-team

=====================================================
//This stops SQL Injection in POST vars
foreach ($_POST as $key => $value)
    if(isset($_POST['{$key}']))
        $_POST[$key] = mysql_real_escape_string($value);
 
//This stops SQL Injection in GET vars
foreach ($_GET as $key => $value)
    if(isset($_GET['{$key}']))
        $_GET[$key] = mysql_real_escape_string($value);