>$query = "INSERT INTO `stats` (`vid`, `id`, `vn`, `time`, `host`, `referrer`, 
>`browser`) VALUES ('', '$id', '$_COOKIE
>['tececo_stats']', '$time', '$_SERVER['REMOTE_HOST']', '$_SERVER['HTTP_REFERER']', 
>'$_SERVER
>['HTTP_USER_AGENT']'); ";

I hope you are using addslashes on your $_COOKIE and $_SERVER vars, too, otherwise 
your query is wide open to some attacks...

---John Holmes...

Reply via email to