SQL Injection Vulnerability in edituser.php

[HenryHoggard]

File: edituser.php
https://github.com/thescript/secret/blob/9a768e54314e1020f64bdf0373f9d8695d52130a/w3/admin/edituser.php
Needs sanitization on SQL query "where username = $_GET"
See http://php.net/manual/en/security.database.sql-injection.php