diff --git a/searchresults.php b/searchresults.php index 7cb9703..8e75ac1 100644 --- a/searchresults.php +++ b/searchresults.php @@ -36,8 +36,11 @@ $queryText = $_POST['queryText']; $queryTextArray = explode(" ", $queryText); $numberOfKeywords = count($queryTextArray); + for ($x = 0; $x < $numberOfKeywords; $x++) { + $queryTextArray[$x] = filter_var($queryTextArray[$x], FILTER_SANITIZE_STRING); + } - $MySQL = new mysqli('localhost', 'mdotchri_dba', 'Milf15milf', 'mdotchri_asktobyDatabase'); + $MySQL = new mysqli('localhost', 'USERNAME', 'PASSWORD', 'DATABASE'); for ($i = 0; $i < $numberOfKeywords; $i++) { $SQL = "SELECT domain FROM keywordTable WHERE (keywordOne = '{$queryTextArray[$i]}' OR keywordTwo = '{$queryTextArray[$i]}' OR @@ -73,7 +76,6 @@ } echo ""; - ?> - + \ No newline at end of file