[stonyarc]

Originally Posted by Hunne

ATTENTION: It is possible to run dangerous mysql queries with this mod.
In the main file change:

PHP Code:

$getinfo_hse_list = $db->query_first("SELECT mapid,cat_id,title_map,text_map,username,url_location,text_description_map,date_map,lat_map,lng_map,url_thread,img_location,approve,userid FROM " . TABLE_PREFIX . "googlemaphse where mapid = $mapid"); 


to

PHP Code:

$getinfo_hse_list = $db->query_first("SELECT mapid,cat_id,title_map,text_map,username,url_location,text_description_map,date_map,lat_map,lng_map,url_thread,img_location,approve,userid FROM " . TABLE_PREFIX . "googlemaphse where mapid = '".mysql_escape_string($mapid)."'"); 


I'll include a number of these fixes in the next version