hardwaremaster

$editFormAction = $_SERVER['PHP_SELF'];if (isset($_SERVER['QUERY_STRING'])) {  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);}if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "webform")) {  $insertSQL = sprintf("INSERT INTO stdfeed (name, `add`, cty, stat, zip, ph1, ph2, email, edu, course, how, timing) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",                       GetSQLValueString($_POST['infoFirstName'], "text"),                       GetSQLValueString($_POST['infoAddress'], "text"),                       GetSQLValueString($_POST['infoCity'], "text"),                       GetSQLValueString($_POST['infoState'], "text"),                       GetSQLValueString($_POST['infoZipcode'], "text"),                       GetSQLValueString($_POST['infoPhone1'], "text"),                       GetSQLValueString($_POST['infoPhone2'], "text"),                       GetSQLValueString($_POST['infoEmail'], "text"),                       GetSQLValueString($_POST['infoSchooling'], "text"),                       GetSQLValueString($_POST['infoProgram'], "text"),                       GetSQLValueString($_POST['infoReference'], "text"),                       GetSQLValueString($_POST['infoCallTime'], "text"));  mysql_select_db($database_stdVarify, $stdVarify);  $Result1 = mysql_query($insertSQL, $stdVarify) or die(mysql_error());  $insertGoTo = "request-thanks.php";  if (isset($_SERVER['QUERY_STRING'])) {    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";    $insertGoTo .= $_SERVER['QUERY_STRING'];  } header(sprintf("Location: %s", $insertGoTo));// <---line no 159}