[orth]

Hi King,

Wanted to thank you for your mod and point out a little error that popped up. After an import from another db, one of our users with an apostrophe in her name caught this unquoted part in the forumhome_start hook.

$wpsql3 = $db->query("SELECT * FROM `" . TABLE_PREFIX . "thread` WHERE `postusername`='" . $vbulletin->userinfo['username'] . "'");
$wp_user_thread_count = $db->num_rows($wpsql3);

I'm fairly new to vBulletin but for sanity:

$wpsql3 = $db->query("SELECT * FROM `" . TABLE_PREFIX . "thread` WHERE `postusername`='" . $db->escape_string($vbulletin->userinfo['username']) . "'");
$wp_user_thread_count = $db->num_rows($wpsql3);

Thanks again, take care
orth