What would I need to edit to support usernames with <> for example?

I think that htmlspecialchars() needs to be in here somewhere but I do not know where it needs to go.

Note that by adding in htmlspecialchars() it should also reduce the odds that this script can be exploited.

Fixed:

Replace:
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$_POST['giftname']."'");

With:
$sqlname = htmlspecialchars($_POST['giftname']);
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$sqlname."'");

@op I just wanted to say thanks for this, my users are very happy with this mod.

@Zero this helped as i have a lot of users with weird names.

Working on vb4.1.0

As I now actually use vb 4 (previously I was using vb3 despite posting how to fix the error) I wanted to post a fully patched version for people to use as a base install so they do not have problems. I use this exact file myself for instructions and if it stops working for me I will post back here with an update if I manage to fix it myself.

this mod is great but i tested if there is a way to choose what usergroup cant get gifted becuase i dont want any staff to get gifted the subscribed usergroup so i will have to remove it.. till there is a better gifting mod

Dosen't seem to work on v4.2

Any fixes for this?

payments.php does not exist or I cannot find it, where else should that segment of code go?

It does exist and is in the root directory for your vbb install. Also I am not sure if the one posted by the OP works or not but the one that I linked a few years back still works fine even on the latest version.

its working in vb 4.2.0 or not ?
if use this mod then members paying subs like as gift ?