SQL-Injection Vulnerability

[cintoros]

Hello

I found possible SQL-Injection vulnerabilities in your project.
see https://www.php.net/manual/en/security.database.sql-injection.php for examples

They can be fixed by using Prepared Statements see https://www.php.net/manual/en/mysqli.quickstart.prepared-statements.php
For example:

$stmt = mysqli_prepare("SELECT email_id FROM career_post WHERE email_id=?");
    $stmt->bind_param("s", $email_check);
    $stmt->execute();
    if ($query_select_run = $stmt->get_result())

instead of

$query_select = "SELECT email_id FROM career_post WHERE email_id='$email_check'";
	if($query_select_run = mysql_query($query_select))