FYI there is a easily-fixable but potentially-exploitable bug in this mod:
1. tags are not escaped, so a tag like "mike's" will give you a DB error
2. regex characters in tags will cause database errors, i.e. if you search for: [tag]
To address this, I used the following addition to the code:
$qtag = str_replace(array(']','[','\\','^','$',',','|','?','*','+','(',')','\''),a rray('\\]','\[','\\\\','\\^','\\$','\\,','\\|','\\?','\\*','\\+' ,'\\(','\\)','\\\''),$qtag);
You can also use $vbulletin->db->escape_string() to fix issue #1, but that doesn't cover the regex characters.
|