[smirkley]

Originally Posted by kh99

You would just insert it where you use $username in the query. For example in the code nhawk posted it would be:

$tmpname = $vbulletin->db->query_first("SELECT email 
FROM " . TABLE_PREFIX . "user 
WHERE username = '" . $vbulletin->db->escape_string($username) . "'");

$useremail = $tmpname['email'];

Well, the code you suggested.
I know I have to add a preceeding backslash to all points of $, and that doesnt change execution but on my setup adding the backslash removes the initial error.

But now it hangs on :

$tmpname = $vbulletin->db->query_first("SELECT email
FROM " . TABLE_PREFIX . "user
WHERE username = '" . $vbulletin->db->escape_string($username) . "'");