[alkatraz]

Originally Posted by Erwin

Yup, that would do it. I should have sanity checking in the code, but may have forgotten to add it.

Here's what that section of code looks like from your script (unmodified)

PHP Code:

('".addslashes(htmlspecialchars($bbuserinfo[username]))." $formtitle', " . TIMENOW . ", $formforumid,
                                         1, 0, '" . addslashes($bbuserinfo['username']) . "', $bbuserinfo[userid],
                                         '" . addslashes($bbuserinfo['username']) . "', " . TIMENOW . ", 0, 1,
                                         0) 


I see ".addslashes(htmlspecialchars($bbuserinfo[username]))." has addslashes around it but $formtitle', doesn't..

I guess that's because you're predefining $formtitle within form.php whereas i've modified it so the form title is specified in an INPUT box on the form which gets submitted. (useful in my situation where i'm forcing members to submit their classified ads through this form)