[Haqa]

This is a really cool mod (Install clicked) and I'm hoping it's going to keep my userbase active!

However (don't you hate it when someone says that?) I discovered a tiny bug in the"Global Bounce Headers" plugin. If a user has an apostrophe (single quote) in their email address the SQL SELECT statement blows up during account creation.

The fix is to quote $toemail with mysql_real_escape_string. This is the fixed plugin:

if(preg_match("/Remindermail/i",$headers)){
	$headers = str_replace('text/plain', 'text/html', $headers);
} else {
$result = $vbulletin->db->query_read("SELECT userid,salt FROM " . TABLE_PREFIX . "user WHERE email='" . mysql_real_escape_string($toemail) . "'");
$row = $vbulletin->db->fetch_array($result);
$userid = $row['userid'];
$salt = $row['salt'];
$headers .= "X-Remindermail-BounceId: $userid" . $delimiter;
$headers .= "X-Remindermail-BounceSalt: $salt" . $delimiter;
}

Love it to bits, thanks!

H.