diff -r 793af7691a5e -r 122f64716161 www/includes/db_recipes.php --- a/www/includes/db_recipes.php Sat Dec 15 21:27:01 2018 +0100 +++ b/www/includes/db_recipes.php Sat Dec 15 23:22:11 2018 +0100 @@ -14,7 +14,7 @@ $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b"); $rescapers = array("'"); $rreplacements = array("\\'"); -$disallowed = array('visibleindex','uniqueid','boundindex','uid','h_weight'); +$disallowed = array('visibleindex','uniqueid','boundindex','uid','h_weight','m_weight'); if (isset($_POST['insert']) || isset($_POST['update'])) { if (isset($_POST['insert'])) {