SQL Injection vulnerability

[celyes]

Hello, everyone.

I'm opening this issue to inform you that all PHP files containing SQL queries are vulnerable to SQL injection.

Suggested fix: try using prepared statements

I'm tagging @madenemalika-zz since the PHP files are commited by her
@HouariZegai have a quick look

Thank you all

[HouariZegai]

Salem Ilyes,

You right, I am also saw it, ping @madenemalika.

Thanks for your feedback.

[celyes]

@madenemalika Any commits?

[celyes]

UPDATE: XSS and CSRF Vunerabilities could also be found.