05-20-2012, 03:08 PM
Replace: (line 66)
( $conf[use_encryption] ? $pass = md5( $_POST[pass1] ) : $pass = $_POST[pass1] )
To:
( $conf[use_encryption] ? $pass = md5( $_POST[pass1] ) : $pass = $_POST[pass1] );
And...
This (line 100)
colspan="2">
to
Full code:
Ok, im busted for not testing it after i wrote it haha
Why you didnt use mysql_real_ESCAPE_string ?
I use PDO to communicate with the database and not the mysql_* functions of PHP.
PDO does all the escaping itself making mysql injection completely impossible.

