WartburgComputerClub/date2knight — Issue #35: security issues
Author: dattashantih
Created: 2012-01-23 05:24:00+00:00
State: open

We should escape input before querying and also before bringing to frontend. Maybe use smarty for a template engine to get rid of frontend problem and mysqli prepared statements for database querying.