My Little Pony: Friendship is Magic

<?php
$friendship=$magic;

function learned($start,$end){
    $msg='';
    $lesson=mysql_query("SELECT story, friendsid, about, date, plot FROM friendship INNER JOIN ponies ON ponies.id = friendship.friendsid WHERE friendship.about IS NOT NULL AND date>'$start' AND date<'$end' LIMIT 1");
    while ($episode = mysql_fetch_assoc($lesson)){
        $msg.=$episode['plot']."rn";
    }
    return $msg;
}

$greeting = "Dear Princess Celestia,rnrn";
$signature="rnrnYour Faithful Student,rnTwilight Sparkle";

$to      = '';
$subject = 'Dail report: '.date("m.d.y");
$headers = 'From: ' . "rn" .
    'Reply-To: ' . "rn" .
    'X-Mailer: PHP/' . phpversion();

$message=$greeting.learned(time()-86400,time()).$signature;

mail($to, $subject, $message, $headers);
?>
Vote up this code0
  • Guest

    sql injections…