<?php
$_CONFIG = true;
# obvious db stuff
$CFG_USER = 'wikihelp';
$CFG_PASSWORD = 'wikihelp';
$CFG_SERVER = 'localhost';
$CFG_DATABASE = 'wikihelp';
# this is the return address for emails
$CFG_RETURN_ADDRESS = '';
# this if true requires registration before edit
$CFG_REGISTERED_ONLY = FALSE;
$con = mysql_connect($CFG_SERVER,$CFG_USER,$CFG_PASSWORD);
mysql_select_db($CFG_DATABASE, $con);
mysql_set_charset('utf8',$con);
//This stops SQL Injection in POST vars
foreach ($_POST as $key => $value) {
$_POST[$key] = mysql_real_escape_string(str_replace("\\","\\\\",$value));
}
//This stops SQL Injection in GET vars
foreach ($_GET as $key => $value) {
$_GET[$key] = mysql_real_escape_string(htmlspecialchars ($value,ENT_QUOTES,'UTF-8'));
}
?>