[Phpwm] site critique please

[David Goodwin]

Phil Beynon wrote:
> Hi all,
> 
> Just finisheed my latest user content managed showcase site, if anyone on
> the list would like to take a look and give me any feedback regarding any
> aspect of it........
> 
> http://www.ralphsutcliffeminerals.co.uk/index.php
> 


I think it's vulnerable to SQL injection attacks, e.g.

http://www.ralphsutcliffeminerals.co.uk/full_arc.php?ident=1768'888

thanks
David.

-- 
David Goodwin

[ david at codepoets dot co dot uk ]
[ http://www.codepoets.co.uk       ]