1 files changed, 1 insertions, 1 deletions
diff --git a/comic.php b/comic.php
index 352060b..1e94abc 100755
--- a/comic.php
+++ b/comic.php

@@ -8,7 +8,7 @@ if (!isset($_GET['id']))
        exit;
 }
-$getcomic = "SELECT * FROM comics WHERE filename = \"" . $_GET['id'] . ".png\"";
+$getcomic = "SELECT * FROM comics WHERE filename = \"" . mysqli_real_escape_string($mysql_conn, $_GET['id']) . ".png\"";
 $getcomic2 = mysql_query($getcomic);
 $getcomic3 = mysql_fetch_array($getcomic2);

diff --git a/comic.php b/comic.php index 352060b..1e94abc 100755 --- a/comic.php +++ b/comic.php
@@ -8,7 +8,7 @@ if (!isset($_GET['id']))
8	exit;	8	exit;
9	}	9	}
10		10
11	$getcomic = "SELECT * FROM comics WHERE filename = \"" . $_GET['id'] . ".png\"";	11	$getcomic = "SELECT * FROM comics WHERE filename = \"" . mysqli_real_escape_string($mysql_conn, $_GET['id']) . ".png\"";
12	$getcomic2 = mysql_query($getcomic);	12	$getcomic2 = mysql_query($getcomic);
13	$getcomic3 = mysql_fetch_array($getcomic2);	13	$getcomic3 = mysql_fetch_array($getcomic2);
14		14