$tmpname = $vbulletin->db->query_first("SELECT email FROM " . TABLE_PREFIX . "user WHERE username = '" . $vbulletin->db->escape_string($username) . "'"); $useremail = $tmpname['email'];