Don't put contents of $_POST et al directly into SQL statements. It seems I missed at least one occurence of this in my previous commit.
Don't put contents of $_POST et al directly into SQL statements. It seems I missed at least one occurence of this in my previous commit.

avleen/vexim2,runout-at/vexim2,runout-at/vexim2,avleen/vexim2,runout-at/vexim2,Udera/vexim2,Udera/vexim2,avleen/vexim2