Search Results

Surely if it's not escaping the ' correctly, then you've got some potential security holes with the way the sql is constructed, handled and then executed by the php code.