OK. Fixed the bug - at least it appears to be fixed.
In admin_quiz.php
Find:
Code:
$DB->query("insert into ".TABLE_PREFIX."quiz
(q_name,q_state,q_desc,q_forcat,q_image)
values
('{$sub['s_name']}',0,'{$sub['s_desc']}',{$sub['s_cat']},'{$sub['s_image']}')");
Replace with:
Code:
$DB->query("insert into ".TABLE_PREFIX."quiz
(q_name,q_state,q_desc,q_forcat,q_image)
values
('".addslashes($sub['s_name'])."',0,'". addslashes($sub['s_desc'])."',{$sub['s_cat']},'{$sub['s_image']}')");
Find:
Code:
$QueryBits[] = "('{$Question['Q']}','{$Question['Type']}','".addslashes(serialize($Params))."',$ID)";
Replace with:
Code:
$QueryBits[] = "('".addslashes($Question['Q'])."','{$Question['Type']}','".addslashes(serialize($Params))."',$ID)";