[MaryTheG(r)eek]

Originally Posted by thincom2000

I was talking about in the cron. $db->escape_string is missing in two places (both in micronewsletter_members.php):

        $email = $member["email"];
         $check_user = $vbulletin->db->query_read("SELECT * FROM " . TABLE_PREFIX . "micronewsletter_subscribers WHERE email='$email' ORDER BY email ASC LIMIT 1");

And a few lines later in the INSERT.

You don't need to clean anything when you're retrieving data from the database. You clean only INPUTS.

Maria