$cfg_parish_name is used in queries after being escaped. However, if magic quotes is ON, adodb assumes the the string is already escaped, however, it is not since the string is not retrieved via POST or GET, it is hard-coded in the config file.
Log in to post a comment.