$sql = "SELECT MD5(articleTitle) AS hash FROM ".ARTICLE_TABLE." WHERE id = '" . $_POST[md5('trap_id')] . "'"; $result = $db->query($sql); $row = $result->fetch(); $hash = $row['hash']; if (!isset ($_POST[$hash]) || $_POST[$hash] != strtoupper ( $hash . substr ($hash,11))) { exit ("Your comment could not be submitted due to security measures."); }