12
For the love of all that is holy, don't use addslashes to prevent SQL injection.
I just owned your site:
Edit: Even worse.
I just noticed that you're attempt at preventing injection via addslashes, isn't even being used!
<?php
$kUserID = $_POST['kUserID'];
$user = addslashes($_POST['kUse...