[Asha'man]

Hi,

first of all, thanks for the really nice chatbox! It's running fine now in my brandnew vBulletin installation @http://www.celica-community.de

I had to patch a small thing to allow usernames containing ticks (as mine):

$username = ereg_replace("'","\\'",$vbulletin->userinfo['username']);

And then use $username in the rest of the code instead of $vbulletin->userinfo['username'].

It would be great if you could add a fix similar to this to your codebase. So I (and probably others) won't have to take care for the future. It also enhances your security. Someone might be able to inject SQL by using a malformed username or something. I think it's not trivial or maybe not even possible, but why not going the safes way?!

Cheers,
Thomas