e-counting

<?php

 include_once("db_tools.php");

 include_once("tools.php");

$_POST = filterParameters($_POST);

$rows = array();

$success = "false";

$message = "";

$newElectionName = "";

$SQL =  "SELECT * FROM election WHERE ELE_Code = ".$_POST['newElectionCode']." AND ELE_USE_Code = ".$_SESSION['EVOT_UserCode'];

$conn = db_connect();

$rs = mysql_query($SQL, $conn) or die(mysql_error());

// ?? ??? ??????? ???? ? ??????? Election ? ??? ?????? ???? ???????? user ??? ?????? ??????.

if (mysql_num_rows($rs)>0) {

 $row = mysql_fetch_assoc($rs);

 $_SESSION['EVOT_ElectionCode'] = $_POST['newElectionCode'];

 $_SESSION['EVOT_ElectionName'] = $row['ELE_Name'];

 $newElectionName =  $row['ELE_Name'];

 $success = "true";

} else {

  $message = "Something went wrong";

}

echo ('{"success":"'.$success.'", "message":"'.$message.'", "newElectionName":"'.$newElectionName.'"}');

db_disconnect();

?>