This product produces a vulnerability in my Hide Hack that I'd like to patch. I want to put this code in a hook, but I don't know which hook would apply to the spy.php page. Any ideas?
Code:
global $vbphrase, $db;
$post_text = $db->query_first("SELECT pagetext FROM " . TABLE_PREFIX . "post WHERE postid = $post[postid] ORDER BY dateline ASC");
$post_hide['pagetext'] = preg_replace('/\\[hide\\](.*)\\[\/hide\\]/siU', 'Your Message Goes Here', $post_text[pagetext]);
$post['pagetext'] = nl2br(vbchop($post_hide['pagetext'], 200));