[N9ne]

There were mostly things that would apply to individual's code...

but for example, in admin/user.php, the these two steps will have been modified a few times already by other hacks and you might not find them straight off:

## FIND:

$DB_site->query("INSERT INTO user (userid,usergroupid,username,password,email,stylei d,parentemail,coppauser,homepa ge,icq,aim,yahoo,signature,adminemail,showemail,in visible,usertitle,customtitle, joindate,cookieuser,daysprune,lastvisit,lastactivi ty,lastpost,posts,timezoneoffs et,emailnotification,receivepm,emailonpm,ipaddress ,pmpopup,options,birthday) VALUES (NULL,'$usergroupid','".addslashes(htmlspecialchar s($ausername))."','".addslashe s(md5($apassword))."','".addslashes(htmlspecialcha rs($email))."','$userstyleid', '".addslashes(htmlspecialchars($parentemail))."',' $coppauser','".addslashes(html specialchars($homepage))."','".addslashes(htmlspec ialchars($icq))."','".addslash es(htmlspecialchars($aim))."','".addslashes(htmlsp ecialchars($yahoo))."','".adds lashes($signature)."','$adminemail','$showemail',' $invisible','".addslashes($use rtitle)."','$customtitle',$joindate,'$cookieuser', '$daysprune',$lastvisit,$lasta ctivity,$lastpost,'$posts','$timezoneoffset','$ema ilnotification','$receivepm',' $emailonpm','".addslashes($aipaddress)."','$pmpopu p','$options','birthday')");

## REPLACE WITH:

$DB_site->query("INSERT INTO user (userid,usergroupid,username,password,email,stylei d,parentemail,coppauser,homepa ge,icq,aim,yahoo,signature,adminemail,showemail,in visible,usertitle,customtitle, joindate,cookieuser,daysprune,lastvisit,lastactivi ty,lastpost,posts,timezoneoffs et,emailnotification,receivepm,emailonpm,ipaddress ,donator,pmpopup,options,birth day) VALUES (NULL,'$usergroupid','".addslashes(htmlspecialchar s($ausername))."','".addslashe s(md5($apassword))."','".addslashes(htmlspecialcha rs($email))."','$userstyleid', '".addslashes(htmlspecialchars($parentemail))."',' $coppauser','".addslashes(html specialchars($homepage))."','".addslashes(htmlspec ialchars($icq))."','".addslash es(htmlspecialchars($aim))."','".addslashes(htmlsp ecialchars($yahoo))."','".adds lashes($signature)."','$adminemail','$showemail',' $invisible','".addslashes($use rtitle)."','$customtitle',$joindate,'$cookieuser', '$daysprune',$lastvisit,$lasta ctivity,$lastpost,'$posts','$timezoneoffset','$ema ilnotification','$receivepm',' $emailonpm','".addslashes($aipaddress)."','$donati on','$pmpopup','$options','bir thday')");

------------------------------------------------------------------------------------------------------------------------------------------------------------------------

## FIND: (around line 344)

$DB_site->query("UPDATE user SET birthday='$birthday',options='$options',usergroupi d='$usergroupid',username='".a ddslashes(htmlspecialchars($ausername))."'$pwdincl ude,email='".addslashes(htmlsp ecialchars($email))."',styleid='$userstyleid',pare ntemail='".addslashes(htmlspec ialchars($parentemail))."',coppauser=$coppauser,ho mepage='".addslashes(htmlspeci alchars($homepage))."',icq='".addslashes(htmlspeci alchars($icq))."',aim='".addsl ashes(htmlspecialchars($aim))."',yahoo='".addslash es(htmlspecialchars($yahoo))." ',signature='".addslashes($signature)."',adminemai l=$adminemail,showemail=$showe mail,invisible=$invisible,usertitle='".addslashes( $usertitle)."',customtitle=$cu stomtitle,joindate=$joindate,cookieuser=$cookieuse r,nosessionhash=$nosessionhash ,daysprune='$daysprune',lastvisit=$lastvisit,lasta ctivity=$lastactivity,lastpost =$lastpost,posts='$posts',timezoneoffset='$timezon eoffset',emailnotification=$em ailnotification,receivepm='$receivepm',emailonpm=' $emailonpm',ipaddress='".addsl ashes($aipaddress)."',pmpopup=IF(pmpopup=2 AND $pmpopup=1,pmpopup,'$pmpopup') WHERE userid=$userid");

## REPLACE WITH:

$DB_site->query("UPDATE user SET birthday='$birthday',options='$options',usergroupi d='$usergroupid',username='".a ddslashes(htmlspecialchars($ausername))."'$pwdincl ude,email='".addslashes(htmlsp ecialchars($email))."',styleid='$userstyleid',pare ntemail='".addslashes(htmlspec ialchars($parentemail))."',coppauser=$coppauser,ho mepage='".addslashes(htmlspeci alchars($homepage))."',icq='".addslashes(htmlspeci alchars($icq))."',aim='".addsl ashes(htmlspecialchars($aim))."',yahoo='".addslash es(htmlspecialchars($yahoo))." ',signature='".addslashes($signature)."',adminemai l=$adminemail,showemail=$showe mail,invisible=$invisible,usertitle='".addslashes( $usertitle)."',customtitle=$cu stomtitle,joindate=$joindate,cookieuser=$cookieuse r,nosessionhash=$nosessionhash ,daysprune='$daysprune',lastvisit=$lastvisit,lasta ctivity=$lastactivity,lastpost =$lastpost,posts='$posts',timezoneoffset='$timezon eoffset',emailnotification=$em ailnotification,receivepm='$receivepm',emailonpm=' $emailonpm',ipaddress='".addsl ashes($aipaddress)."',donator='$donation',pmpopup= IF(pmpopup=2 AND $pmpopup=1,pmpopup,'$pmpopup') WHERE userid=$userid");