Пипец в ней фильтры foreach($_POST as $ad){ $ad = htmlspecialchars(mysql_real_escape_string($ad)); } foreach($_SESSION as $ad){ $ad = htmlspecialchars(mysql_real_escape_string($ad)); } foreach($_COOKIE as $ad){ $ad = htmlspecialchars(mysql_real_escape_string($ad)); }