laxmi59/backup-of-ritwik — pull request #1 by Braunson (2013-08-02 19:16:22+00:00)
Title: SQL Injections

Found a ton of SQL injections, there's surely more in your code elsewhere. I suggest using PDO Prepared Statements in the future and why not break this into multiple files, perhaps classes or at least sanitize the items coming out of extract(). :)