[Cyricx]

Bugger, no good

I even converted the code over to the gpc stuff and tried add slashes and escape, then tried just add slashes, then just escape

      $vbulletin->input->clean_array_gpc('p', array(
        'victimid'  => TYPE_INT,
        'victim' => TYPE_STR,
        'attacker' => TYPE_STR,
        'newtitle'    => TYPE_STR,
    ));
  $newpreslashedtitle =& $vbulletin->GPC['newtitle'];
  $newslashedtitle = addslashes($newpreslashedtitle);
  $db->query_write("INSERT INTO " .TABLE_PREFIX. "title_wars
  (
  newtitle,
  attacker,
  victim,
  attackerid,
  victimid
  ) VALUES (
   '" . $db->escape_string($newslashedtitle) . "',
   '" . $db->escape_string($vbulletin->GPC['attacker']) . "',
   '" . $db->escape_string($vbulletin->GPC['victim']) . "',
   '" . $db->escape_string($vbulletin->userinfo['userid']) . "',
   '" . $db->escape_string($vbulletin->GPC['victimid']) . "'
  )");

And it will still only grab the characters before the " and stops there

Man sooo close

Thanks anyway Hellcat

I'm gonna go dig through some more files.