$q = mysql_query("select * from exploit where username = '" .$_GET['sql'] . "'"); if(!$q) die(mysql_error());