Finding the hole in my custom php script?
<p>Today i received very unpleasant email about that one guy has got all my database users records and also he attached a part of screen shot as a proof with the same exact info as in database.</p>

<p>How would i start to look where is the problem? 
What type of hacking attack is that?</p>

<p>Any help appreciated.</p>
