root@cert-cos5 stars]# diff -u stars_index.php.orig stars_index.php
--- stars_index.php.orig	2011-10-28 09:28:31.000000000 -0400
+++ stars_index.php	2011-10-28 09:29:10.000000000 -0400
@@ -77,7 +77,7 @@

     if ($_POST && $_POST['star_selected']) {
         //var_dump($_POST);
-        $star = $_POST['star_selected'];
+        $star = mysql_real_escape_string($_POST['star_selected']);
         $wpdb->query("select * from dati left join planetas on dati.planetas_id=planetas.id where planetas_id=$star");