First off thanks for the excellent arcade hack - our users at ymrforums love it.
I think I may have found would could be a bug - I just added the trotter track game and edited the game description in admincp I added, "legal in NC!"
when relisting in admincp this caused a runtime error, upon debugging I apparantly had no variable set for "in" or "NC" was not found, so instead of adding to the desc, I suppose it got inserted into php code outside of the input field for the description and was trying to execute my description add on!
This could be a problem for someone potentially getting an admin to insert <script> functions or something more simple into the desc, (I'm unsure of whether vbulletin natively does input validation, but a malicious description change to drop all rows wouldn't be cool) I had to use myphpadmin to manually alter the description.
regards,
Mark.
edit: hello? <tap> <tap> is this thing on?