added save for gifts
indroduced sql injection in login