11-06-2011, 12:29 AM
I suggest using mysql_real_escape_string(), instead warmongers anti_inject(), because it will change the info from a word that contains for example IselectIT in the database it will appear IIT, and many other examples.
$accname = mysql_real_escape_string($_POST[accname]);
$accmail = mysql_real_escape_string($_POST[accmail]);
$accpass1 = mysql_real_escape_string($_POST[accpass1]);
$accpass2 = mysql_real_escape_string($_POST[accpass2]);
They can just remove the delimiters and have them characters available. Might be easier for them.
