Perhaps I'm doing something wrong, but why does the following work:
var myXHR = new XHR({method: 'get'}).send('sql.php?sql=SELECT * FROM INFORMATION_SCHEMA.SCHEMATA');
Yet this doesn't?
var myXHR = new XHR({method: 'get'}).send('sql.php','sql=SELECT * FROM INFORMATION_SCHEMA.SCHEMATA');
And by doesn't, I mean that $_GET['sql'] is unset.
God spectre, i hope you know what you are doing 'cose passing plain sql commands as php query could be really dangerous...
I really want your sql-in-xhr-request in my daily wtf ;)