[grog6]

@ iggy123 : Replace in the file change_usergroup.php this :

PHP Code:

SELECT * FROM user WHERE (username='$name') 


by

PHP Code:

SELECT * FROM user WHERE (username='".addslashes($name)."') 


In fact, you just have to add addslashes() around the username in all the DB queries, this will automatically add a \ before the ' which is in the member's username, and so there should be no error

@ Limitter, you can't for the moment, try to add one by yourself, it shouldn't be too hard