$value) { $_POST[$key] = htmlspecialchars(addslashes($value)); } foreach ($_GET as $key => $value) { $_GET[$key] = htmlspecialchars(addslashes($value)); } // mysql_connect($host,$user,$pass); mysql_select_db($db); function is_logged() { if ($_COOKIE[user] == "admin") { $q = mysql_query("SELECT password FROM configuration WHERE user='admin'"); $a = mysql_fetch_array($q); $code = md5($a[password]); if ($code == $_COOKIE[admincode]) { $retval = 1; } } return $retval; } ?>