[Ted S]

Originally Posted by GCC LLC

I noticed that in your code, you don't include a link identifier on the mysql_real_escape_string:

if($vbulletin->GPC['title']){ $conditions .= " AND pfp.title LIKE '%". mysql_real_escape_string($vbulletin->GPC['title']) ."%'"; } // title of product

Escaping the string is essential for preventing injections so good call on working through that...

We'll be redoing the search function a bit in light of your bug report and will try to test with a few mySQLi connections as well.

Originally Posted by GCC LLC

Also all new reviews go into moderation even though I have the option turned off and made sure the forum have all moderation turned off. Thought it might be a conflict with Glowhost so uninstalled that and they still get moderated.

Does the forum allow for new replies? Closed forums seem to have this issue...