Fixed breach in POST/GET vars

Added simple mysql_real_escape_string on POST and GET vars.