Query("SELECT CODE FROM b_captcha WHERE ID = '".$DB->ForSQL( $_REQUEST['captcha_sid'], 32 )."' "); if( !$ar = $res->Fetch() ){ echo 'false'; exit; } if( $ar["CODE"] != $_REQUEST['captcha_word'] ){ echo 'false'; exit; } echo 'true';?>