Look at the code. ;)

I know it was this hack because i have known this guy for 9 years and he lives 5 blocks from me. Look at the aim conversation that him and me had he says it right there. That should be fact enough for any one to investigate it.

This mod is working perfact on vbulletin 3.7.1 [checked creating thread option - not checked pm function as i don't use it.]

There is only one query in this mod; it's used to grab a username for formatting on the post itself. The query is protected by checking for a NULL value and a is_numeric value. If someone were to try an injection, these two checks would prevent it.

What *can* be done is someone can mess with the cookie to make it look like they are logging into a ton of accounts - if they want to throw a ton of userids into the cookie, they can. AE Detector will simply report what's stored in the cookie.

Never say never, but this plug-in contains very little code and only one query to the vB user database.

Well, I'll say never as to this not being the way in that hacker used on his site.

Welcome back, sir. ;)

I have no doubt that someone may have done that to you - but not via this modification. Its simply not possible. :)

Thank you MPDev :)

Hi Guys,

sorry for posting that here but I have posted it from 17th to "Multiple Account Registration prevation" and I had no answer so far.

So I am posting it again here in case you can tell my why.

thanks in advance.

Yes, that would be nice. But if he's trying to avoid getting caught via cookie he can just clear his cookies. Or he could use a different computer.

It's probably not real unusual for us to have a husband & wife discover our forum and register from the same IP within minutes of each other, but on their own computers.

Note also as I've pointed out, there's some other mod or something out there disabling this mod. It's working good on one of my forums, but not the other.

listen not only can he log in to my account he can edit anything he wants. He can sign into my name and be full admin.