SQL Injection

[conker87]

Just checking on my site tonight and found some rather disturbing new content which I didn't add myself. This lead me to wonder if my login system (that I coded myself) is as secure as I thought it was.

Could anyone try and break into it for me? It's a bit of a weird request, but I suppose prevention is better than reinserting the entire database after an attack.

Anyway, www.leagueofvillains.co.uk is the url. I'd appreciate any feedback, and anything you find can you PM me?

On a side note, is there anything on the server that can tell me who's been doing any $_POST or $_GET functions? And is MAGIC_QUOTES on? If not then I really need to sort it out.

I just found out that it was a little mistake in my code. Still, if anyone wants to try and break into my site to check if my login code is secure, feel free but like I said: PM me the results..