Fmstrat/odm-web — pull request #6 by masta79 (2014-01-13 12:47:37+00:00)
Title: Removed insecure mysql_query call

storeData called mysql_query directly, passing $data to it without proper quoting. The two following lines did the same thing by using prepare/execute, which is much safer.

I've just removed the call as it seems to be unnecessary anyway and poses a security-risk, as the only call to storeData right now passes a POST-variable directly.

I did not test the change, but as the mysql_query call just seems to be a leftover of previous cleanup work of the code no harm should be done.