Hi The register.php has only a form <?php <form name="registerUser" action="register.php" method="post"> <input type="text" name="username" size="10" /> <input type="submit" value="send" /> </form> ?> Does this help ? Thanks for reply 2009/6/4 Stuart <stuttle@xxxxxxxxx> > 2009/6/4 Morris <morris520@xxxxxxxxx>: > > Hi > > > > Can anyone help me handel this URL injection ? > > > > https://www.xxx.co.uk/register.php"| grep "123" > > > > I want to detect it and header back to my index page. > > > > It's quite urgent > > What the smeg is register.php doing that makes it execute that?? Show > us the code. > > -Stuart > > -- > http://stut.net/ >