[TheElf]

If you installed this hack, go to profile PHP, look for:

PHP Code:

$DB_site->query("UPDATE ".TABLE_PREFIX."userfield SET $rpgfield=' $_POST[rpgname]' WHERE userid='$bbuserinfo[userid]'"); 


And replace with:

PHP Code:

$DB_site->query("UPDATE ".TABLE_PREFIX."userfield SET $rpgfield='".addslashes( $_POST[rpgname])."' WHERE userid='$bbuserinfo[userid]'"); 


Why? if the RPG name contains ' that creates an error, but if you also add ; to end the current SQL query after it, start a new query and after that another one just to have a good place for rest of the string... Now that can be real bad. Hope no typos in the code here. (check all other rpg hack specific variables for the same problem)