Security issue

modified:   back/getdata.php
	modified:   back/js/demo.js