[Sabolin]

Originally Posted by Slide

the simple method is fine, but it fucks up when someone calls foo.php?user=;DELETE FROM blah;

Explain further, because we aren't using any GET variables or running any queries with the code we are discussing.