[dsboyce8624]

Originally Posted by MarcoH64

This means there is a potential SQL insertion vulnerability in this hack. To avoid problems everybody should edit their qas.php file and change the line:

PHP Code:

$condition = "username LIKE '$u2%'"; // search for usernames starting with 


into:

PHP Code:

$condition = "username LIKE '" . addslashes($u2) . "%'"; // search for usernames starting with 


PS Don't have this installed, so above modification is not tested.

This seems to be working fine, in case nobody else reported back.

3.0.7 vBa CMPS 1