[Blast3r]

I'm using the newest one, R39, and I'm just going to leave this here:

%e specifier escapes a string so we can avoid sql injection which means we don't have to use mysql_real_escape_string