Unescaped user input which reads/writes/etc to the filesystem. Intermix of PHP4/5 all over the place. Zero separation of presentation and business logic. It also has code which references a MySQL database and missing library files.
Can we just all collectively downvote this and/or change the title to "Daily WTF: ..."
Can we just all collectively downvote this and/or change the title to "Daily WTF: ..."