diff --git a/register_participants.php b/register_participants.php index 034a127..89f2755 100644 --- a/register_participants.php +++ b/register_participants.php @@ -54,6 +54,8 @@ } else if($_POST['action']=="continue") { + if($_POST['email']) + $_SESSION['email']=stripslashes(mysql_escape_string($_POST['email'])); $q=mysql_query("SELECT registrations.id AS regid, registrations.num AS regnum, students.id AS studentid, students.firstname FROM registrations,students ". "WHERE students.email='".$_SESSION['email']."' ". diff --git a/schoolinvite.php b/schoolinvite.php index 4e69efc..d401223 100644 --- a/schoolinvite.php +++ b/schoolinvite.php @@ -232,7 +232,7 @@ if($_SESSION['schoolid'] && $_SESSION['schoolaccesscode']) echo "