[Adrian Schneider]

Did you figure everything out? The "?" and everything after it in the URL, is known as the query string. It can be accessed via the $_GET array. file.php?do=closethread&t=15 will translate into the following $_GET array:

PHP Code:

$_GET = array(
    'do' => 'closethread',
    't' => 15
); 


Because there values can be easily tainted, if you are using them in queries (or even at all) you should make sure they are "clean". The threads I posted above should show you how to use vBulletin's cleaning functions to make them safe. Once this is done, they all go into $vbulletin->GPC.

$_POST is similar, it is populated from form elements where the form action is set to post. These are just as insecure as $_GET values, so be sure to clean them.

Also, it might be easier to use a template instead of using echo and basically recreating the standard shell template (GENERIC_SHELL).