Improved register_globals

This commit is contained in:
root 2008-08-31 20:25:06 +00:00
parent 75eeff8662
commit c0e4bc4298

View file

@ -22,8 +22,8 @@ if(array_key_exists('location',$_REQUEST) && $_REQUEST['location'] != "") {
$bits = explode(",", $_REQUEST['location']); $bits = explode(",", $_REQUEST['location']);
$loc = trim(mysql_escape_string($bits['0'])); $loc = trim(mysql_escape_string($bits['0']));
$reg = trim(mysql_escape_string($bits['1'])); $reg = ''; if(array_key_exists('1',$bits)) $reg=trim(mysql_escape_string($bits['1']));
$ccname = trim(mysql_escape_string($bits['2'])); $ccname = ''; if(array_key_exists('2',$bits)) $ccname=trim(mysql_escape_string($bits['2']));
$query = "select `locations`.`id` as `locid` from `locations`, `regions`, `countries` where $query = "select `locations`.`id` as `locid` from `locations`, `regions`, `countries` where
`locations`.`name` like '$loc%' and `regions`.`name` like '$reg%' and `countries`.`name` like '$ccname%' and `locations`.`name` like '$loc%' and `regions`.`name` like '$reg%' and `countries`.`name` like '$ccname%' and
`locations`.`regid`=`regions`.`id` and `locations`.`ccid`=`countries`.`id` `locations`.`regid`=`regions`.`id` and `locations`.`ccid`=`countries`.`id`