[Nordinho]

Originally Posted by MarcoH64

I would do it different, just change:
[sql]$keywords_known = $DB_site->query("
SELECT counter
FROM " . TABLE_PREFIX . "statistic_searchengine_keywords
WHERE keywords = '$keyword_found'
");
[/sql]into[sql]$keywords_known = $DB_site->query("
SELECT counter
FROM " . TABLE_PREFIX . "statistic_searchengine_keywords
WHERE keywords = '" . addslashes($keyword_found) . "'
");
[/sql]
You should allways use addslashes around alphanumeric data to protect against sql insert vulnerability.

I suggest that the coder of this hack review his sources and update with a patch.

how would I add the ' to this?? since that one causes some errors as well...