[blink]Sql Injection[/blink]

В поле Search Programs

запрос вида 123' выдает

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '') and (hl_listings.expiration = 0 || date_a' at line 13

Налицо SQL - дальше копать не стал, а надо?