SQL Injection fix in info.php