[Cheertobi]

Hi,

once again, have not been through all post of this thread. Just want to let you know, that I found two missing TABLE_PREFIXes!

$DB_site->query("INSERT INTO post (postid,threadid,title,username,userid,dateline,pagetext,allowsmilie,showsignature,ipaddress,iconid,visible) VALUES (NULL,'$formreplythreadid','".addslashes(htmlspecialchars($bbuserinfo[username]))." $formtitle','".addslashes($bbuserinfo[username])."','$bbuserinfo[userid]','".time()."','" . addslashes($formsend) . "','1','1','0','0','1')");
	  $DB_site->query("UPDATE thread SET replycount = replycount + 1, lastpost = " . TIMENOW . ", lastposter = '".addslashes($bbuserinfo[username])."' WHERE threadid = $formreplythreadid"); 
	                  $DB_site->query("
                                UPDATE " . TABLE_PREFIX . "forum
                                SET replycount = replycount +  1,
                                lastpost = " . TIMENOW . ",
                                lastposter = '".addslashes(htmlspecialchars($bbuserinfo[username]))."',
                                lastthread = '" . addslashes($bbuserinfo['username']) . " $formtitle',
                                lastthreadid = $formreplythreadid
                                WHERE forumid = $formreplyforumid

have to be like

$DB_site->query("INSERT INTO " . TABLE_PREFIX . "post (postid,threadid,title,username,userid,dateline,pagetext,allowsmilie,showsignature,ipaddress,iconid,visible) VALUES (NULL,'$formreplythreadid','".addslashes(htmlspecialchars($bbuserinfo[username]))." $formtitle','".addslashes($bbuserinfo[username])."','$bbuserinfo[userid]','".time()."','" . addslashes($formsend) . "','1','1','0','0','1')");
	  $DB_site->query("UPDATE " . TABLE_PREFIX . "thread SET replycount = replycount + 1, lastpost = " . TIMENOW . ", lastposter = '".addslashes($bbuserinfo[username])."' WHERE threadid = $formreplythreadid"); 
	                  $DB_site->query("
                                UPDATE " . TABLE_PREFIX . "forum
                                SET replycount = replycount +  1,
                                lastpost = " . TIMENOW . ",
                                lastposter = '".addslashes(htmlspecialchars($bbuserinfo[username]))."',
                                lastthread = '" . addslashes($bbuserinfo['username']) . " $formtitle',
                                lastthreadid = $formreplythreadid
                                WHERE forumid = $formreplyforumid

Anyway, it is a really great hack, can I parse BBCode for Bold etc. in anyway?!

Tobi