[CarlitoBrigante]

Great job!

I wanted to report a minor bug/issue, in vBCredits 1.3. In credits.php, you have this:

	$duser = $db->query_first("SELECT userid, username, credits_canget FROM " . TABLE_PREFIX . "user WHERE username LIKE '" . $db->escape_string($vbulletin->GPC['recipient']) . "'");

This is not good if you have user names that use special characters like underscore, unless you escape them. It is better to simply do something like:

	
$vbulletin->GPC['recipient'] = trim($vbulletin->GPC['recipient']);
$duser = $db->query_first("SELECT userid, username, credits_canget FROM " . TABLE_PREFIX . "user WHERE username = '" . $db->escape_string($vbulletin->GPC['recipient']) . "'");

Otherwise, money sent to a user called the_magic could go to a user called The Magic, or something like that.