rendered paste bodyDefine('VARCHECK_FROM_POST', 0x02, True);Define('VARCHECK_FROM_GET', 0x01, True);Define('VARCHECK_MISSING', 0x00, True);$used = Array( 'submit', 'preview', 'delete', 'poll_delete', 'poll_add', 'poll_edit', 'mode');$aliases = Array( 'post', 'preview', 'delete', 'poll_delete', 'add_poll_option', 'edit_poll_option', 'mode');$locate = Array();$numParams = Count($params);For($iter=0; $iter<$numParams; $iter=1+$i){ $search = $used[$iter]; If( IsSet($HTTP_POST_VARS[$search]) ) { $locate[$iter] = VARCHECK_FROM_POST; } ElseIf( IsSet($HTTP_GET_VARS[$search]) ) { $locate[$iter] = VARCHECK_FROM_GET; } Else { $locate[$iter] = VARCHECK_MISSING; } Switch($locate[$iter]) { Case VARCHECK_MISSING: $buffer = Null; Break; Case VARCHECK_FROM_GET: $buffer = $HTTP_GET_VARS[$search]; Break; Case VARCHECK_FROM_POST: $buffer = $HTTP_POST_VARS[$search]; } If( $buffer !== Null ) { If( Get_Magic_Quotes_Gpc() == True ) { $buffer = StripSlashes($buffer); } $buffer = HTMLSpecialChars($buffer); $alias = $aliases[$iter]; $code = "\$".$alias." = \$buffer;"; Eval($code); } UnSet($search); UnSet($buffer); UnSet($alias); UnSet($code);}UnSet($used);UnSet($aliases);UnSet($locate);UnSet($numParams);UnSet($iter);