[derekivey]

I found the problem Tyler... You aren't using $db->escape_string() in your code.

For example:

PHP Code:

$lpidinfo = $vbulletin->db->query_first("SELECT userid, username FROM " . TABLE_PREFIX . "user WHERE username='$lp'"); 


Should be:

PHP Code:

$lpidinfo = $vbulletin->db->query_first("SELECT userid, username FROM " . TABLE_PREFIX . "user WHERE username='".$db->escape_string($lp)."'"); 


That should fix the problems everyone is having...