[Dylanblitz]

Originally Posted by bigtime

On line 72 of shop.php I changed the following for security purposes:

PHP Code:

$item = $_GET['item']; 


To This:

PHP Code:

$item_dirty = $_GET['item'];
$item = $vbulletin->input->clean($item_dirty, TYPE_NOHTML); 


-Tim

Thanks for this one, I added it to the 2.0.5 release.
Don't know why it worked before with the store.php link. It was from the original code I downloaded to modify. Last changes I made must of kicked something into gear that caused that link to suddenly work heh.