Пипец в ней фильтры
foreach($_POST as $ad){
$ad = htmlspecialchars(mysql_real_escape_string($ad));
}
foreach($_SESSION as $ad){
$ad = htmlspecialchars(mysql_real_escape_string($ad));
}
foreach($_COOKIE as $ad){
$ad = htmlspecialchars(mysql_real_escape_string($ad));
}