Hmm, thanks for the input, I have a lot of thinking to do.
For the record magic_quotes is set to ON in php.ini.
I’ll search more and see if I can find if that text is displayed anywhere, although right now I’m not finding anything.
Is it possible to alter other tables by injecting into that INSERT query? I know I should be able to inject into…[Read more]