By:BoNy-m BoNy-m@xxxxxxxxxxx ---------------------- example:- /popup/calendar_year.php?rental_id=[SQL Injection]