338c338
< 			"refurl"=>getenv("HTTP_REFERER"));
---
> 			"refurl"=>getenv("HTTP_REFERER")); 
619c619
<                 $query .= ", '".$_SESSION['refurl']."'";
---
>                 $query .= ", '".addslashes($_SESSION['refurl'])."'";