[merk]

I take it the user1 query in "place 1" and "place 2" are the same query?

You need to clean every single input variable you might be using to make sure they are actually input variables.

They do not get globalised, so you need to access them from where vBulletin stores them, $vbulletin->GPC['name'].

To get them put into that GPC array, you will need to run clean_gpc or clean_array_gpc (the second one takes many different variables at the same time, does the same thing).

To clean 2 variables, you should use (which would replace the clean_gpc command that you are using at place one.

PHP Code:

$vbulletin->input->clean_array_gpc('r', array(
 'u'   => TYPE_UINT,
 'u2' => TYPE_UINT,
));