[Adam21]

Well,i found found out that this hack will create a bug with Registered Members usergroup's PMs.They will not be able to send PMs to anyone,only Admins,Mods are not affected.I've tested it on vb3.63 to 3.66,th error is the same.The error will display like this

Invalid SQL:
SELECT `username` FROM `user` WHERE `usergroupid` IN ();

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 1
Error Number : 1064
Date : Friday, April 20th 2007 @ 03:33:19 PM
Script : http://www.xxx.org/private.php?...rtpm&pmid=
Referrer : http://www.xxx.org/private.php?do=newpm
IP Address : xxx.xxx.xx.xx
Username : xxx
Classname : vb_database

I'v disabled it of now.Hope Cybernetec can solve this.Cheers!