Anonymous

/*dvds.php:*/    if (LoggedIn())      {      echo("<td><form action='mysql.php' method='get'><input type='text' name='rate_dvd' /><input type='submit' value='Rate' /><input type='hidden' name='title' value='$dvd_url' /></form></td><td><a href=\"mysql.php?rm_dvd=$dvd_url\">remove</a></td>");      }/*mysql.php:*/    /* RATE DVD */    $title = $_GET['title'];        if (isset($rate_dvd) && isset($title))      {      mysql_query("UPDATE DVDs         SET Stars='$rate_dvd'        WHERE Title='$title'      ");       }