08-18-2012, 05:28 PM
Include\reset_level_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\rename_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\remove_gm_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\password_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\login_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\delete_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\delete_items_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Include\add_gm_exec.php line 6, u need to sanitize that also, because its used in a query later on.
Those are the only security risks.
I don't understand why u use 2 different login systems though.
The use of the mysql_ functions in php are deprecated, i would recommend to use mysqli or pdo