SQL Inject

[joshuamd3]

any easy way to block SQL injections from this log-in ??? P.S. I am a complete nooob. 100% noob.

<tr> 
            <td width="37%" height="140" valign="top"> <form action="<? echo($self_url); ?>members/mem_auth.php" method="post" name="login">
                <table width="227" border="0" align="center" cellpadding="0" cellspacing="0" style="border-collapse: collapse">
                  <tr valign="middle" bgcolor="#9C9A9C"> 
                    <td height="16" colspan="2"><div align="center" class="style1"><font size="2" face="verdana">Member 
                    Login:</font></div></td>
                  </tr>
                  <tr> 
                    <td height="11" colspan="2" align="left"><font size="2" face="Tahoma"><b>&nbsp;</b></font></td>
                  </tr>
                  <tr> 
                    <td width="65" height="24" align="left"> <p align="right"><font size="1" face="Tahoma"><b>E-mail 
                        :&nbsp;</b></font></td>
                    <td width="162"> <p align="left"> 
                        <input type="text" name="email" size="25" maxlength="100" class="webforms">
                    </td>
                  </tr>
                  <tr> 
                    <td width="65" align="left"> <p align="right"><font size="1" face="Tahoma"><b>Password 
                        :&nbsp;</b></font></td>
                    <td width="162"> <p align="left"> 
                        <input type="password" name="passwd" size="25" maxlength="20" class="webforms">
                    </td>
                  </tr>
                  <tr> 
                    <td width="65"> <p align="right"></td>
                    <td width="162"> <p align="center"><font face="verdana" size="1"> 
                        <a href="<? echo($self_url); ?>lost.php"> Lost your password?</a><br>
                        <a href="<? echo($self_url); ?>lost.php"> Resend activation email</a></font></td>
                  </tr>
                  <tr> 
                    <td width="65"> <p align="right"></td>
                    <td width="162"> <p align="right">
					<? echo "<input type=hidden name=\"".session_name()."\" value=" . session_id() . ">"; ?>
                        <input type="hidden" name="form" value="sent">
                        <input name="submit" type="submit" style="font-size: 8pt;" value="Log in" class="formbutton">
                    </td>
                  </tr>
                  <tr bgcolor="#999999"> 
                    <td height="19" colspan="2"><div align="center">
						<font font size="2" face="Tahoma">
						<a href="<? echo($self_url); ?>signup.php<? if ($ref) {echo("?ref=$ref"); }?>"?>
						<b>Sign up here!</b></a><br>
                    	<a href="<? echo($self_url); ?>contact.php<? if ($ref) {echo("?ref=$ref"); }?>"?>
						<b>Contact Us</b></a></font></div></td>
                  </tr>
                </table>
              </form></td>

[Rodney_H_]

Well, let's see the script you are using to PROCESS the submitted form data... Then folks here may be better able to make suggestions for you.

[joshuamd3]

What do you mean? the entire file... or then entire script? Its a basic Autosurf Traffic script.

[Rodney_H_]

Sorry. What I mean is that there is no mysql interaction in the code snippet you chose to paste in your first post. Show us the RELEVANT code bits.