ha i would love to see you inject something into it.. the most youll get is php code or html source being shown.. it wont be executed... Ive done many hacks to my script to test.. nothing that would leave my script hackable to the point of change logins and deleteing..

Also is a special salt encryption i worked on.. You can output the password but you wont be able to decrypt it.. Good luck on that...

I didn't patch those only because i didn't have time and there not dangerous to the webmaster.. it will just get annoying when people start to change video titles..

also i had unique hits already setup but i didn't add it to the download because i needed to add a new table for the ips..

edit:fixed the sql injection problem .. ill add them later when i got time to main release..