character entities

Today I want to show you a vulnerability[1] found in IceBB by __GiReX__ which was submitted to milw0rm yesterday. It is exactly such vulnerability that happens when programmers trying to invent their own security mechanisms without understanding all the pitfalls it can create. I thought it would be interesting to see how programmers are thinking and learning. Code block 1, that comes from IceBB, contains some interesting thought flow that led to SQL injection, exactly what the programmer wanted to prevent against.  read more »

94.  function clean_string($v) 
    {