--- a/www/includes/db_recipes.php	Sat Dec 15 11:06:14 2018 +0100
+++ b/www/includes/db_recipes.php	Sat Dec 15 21:27:01 2018 +0100
@@ -14,7 +14,7 @@
 $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b");
 $rescapers = array("'");
 $rreplacements = array("\\'");
-$disallowed = array('visibleindex','uniqueid','boundindex','uid');
+$disallowed = array('visibleindex','uniqueid','boundindex','uid','h_weight');
 
 if (isset($_POST['insert']) || isset($_POST['update'])) {
 	if (isset($_POST['insert'])) {