--- a/sharing/site.php	Sat Dec 03 22:21:56 2011 +0000
+++ b/sharing/site.php	Tue Oct 15 14:04:48 2013 -0400
@@ -36,7 +36,7 @@
   // escape string as SQL param
   function escape1($param)
   {
-    return $param;
+    return mysql_real_escape_string($param);
   }
 
   function site_info($host)