[Release] New Site

[Wizatek]

Check if the user is logged in, and check if the character is from that account.

Also sanitize it, $thing = mysql_real_escape_string( $_GET['thing'] );

 

And u need a character id, a_index, so that means u are expecting a number, make sure it only continues when u get a number.

The best way to do this is to use ctype_digit();

 

if( ctype_digit( $thing ))
{
// is a number
}
else
{
// is not a number
}