#2 SQL Injection in testlogin.php and infouser.php

[Anonymous]

The $_POST values are not checked before entered in the SQL query, therefore this is a security issue which allows the attacker to use an SQL Injection attack.