- 01
- 02
- 03
- 04
- 05
- 06
- 07
- 08
- 09
- 10
function post($key)
{
return mysql_escape_string($_POST[$key]);
}
$sql->Query("SELECT `t1`.*, `t2`.*
FROM `x_local_users` AS `t1`, `x_privs` AS `t2`
WHERE `t1`.`id`=`t2`.`manager_id`
AND `t1`.`login`='".post('userid')."'
AND `t1`.`password`='".md5(post('passw'))."' LIMIT 1");