[lasto]

Looks like someone found a loophole in a script somewhere, and they're executing SQL through it. Be glad they're not doing a "DROP TABLE `post`" or anything like that

so whats the crack with the users runing a sql query - which i dont understand really as how can members gain access to the database by way of the store?
If so this is a serious problem for any of us using this hack and as such i have disabled the store for use by members till this problem is sorted or until im told it is`nt the store that has the problem.