--- a/sharing/share.php	Tue Oct 15 14:29:34 2013 -0400
+++ b/sharing/share.php	Tue Oct 15 14:45:58 2013 -0400
@@ -140,7 +140,7 @@
     $host = $fields[0];
 
     // use it to retrieve existing record if one exists
-    $query = "SELECT ALL FROM site_info WHERE host=".$host;
+    $query = "SELECT ALL FROM site_info WHERE host='".mysql_real_escape_string($host)."'";
 
     $result = mysql_query($query);
     $row = mysql_fetch_array($result);