[kippesp]

Yes, it should work fine. I think the code in this area was first changed in 2.2.7. At least that's what my logs show without tracking down the real ZIP file.

So this line was added between 2.2.6 and 2.2.7:
$bbuserinfo['username'] = htmlspecialchars($bbuserinfo['username']);

The hack addition would still go after the 4th brace in that area--the 2nd brace after the above, quoted line.

Although I have yet to upgrade my forums--don't tell anyone--from your post, at least this area should be fine.

I'm very glad to see that this hack will no longer be necessary in vb3! I think vb3 has its own version anyway.

Paul