Anyone know what this weird error is?

[Disco_Dave]

We haven't had any errors in awhile, just seems strange.

PHP Code:

Database error in vBulletin 4.2.2:

Invalid SQL:
SELECT * FROM vbuserregcode WHERE userregemail = 'bell_o'reily9215@internetmarketerthemes.com';

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'reily9215@internetmarketerthemes.com'' at line 1
Error Number  : 1064
Request Date  : Wednesday, December 18th 2013 @ 11:27:55 PM
Error Date    : Wednesday, December 18th 2013 @ 11:27:57 PM
Script        : http://www.nirc.co.uk/forums/joiningthenirc.php
Referrer      : https://www.nirc.co.uk/forums/joiningthenirc.php?
IP Address    : 23.231.103.163
Username      : Unregistered
Classname     : vB_Database_MySQLi
MySQL Version : 


[billstelling]

'bell_o'reily9215@internetmarketerthemes.com'

that is causing the error code. the ' mark.

[Disco_Dave]

Originally Posted by billstelling

'bell_o'

that is causing the error code. the ' marks

Any idea on how to fix this? Thanks for the reply.

[billstelling]

take the ' out of the email address. he will have to use another email to join nirc.

[Lynne]

Or fix the query to accept the ' (use addslashes(htmlspecialchars_uni ? Sorry, it's been a while since I've done that.)

[Zachery]

You're not sanitizing your inputs, that file is just ready to bust out some nearly nasty SQLi

[vBNinja]

I highly recommend you get someone who knows how to securely handle queries to fix your code because as it is, anyone can easily drop any table in your database.

If you're the one one that coded it, simply pass your email variable through the $vbulletin->db->escape_string() function

[ForceHSS]

The ip belongs to a spam bot i see

[ozzy47]

If this code is vulnerable, then the mod needs to be grave yarded, https://vborg.vbsupport.ru/showthread.php?t=294164

--------------- Added [DATE]1387505631[/DATE] at [TIME]1387505631[/TIME] ---------------

Which I see it now is, 'quarantined'

[BirdOPrey5]

Yes I have quarantined the mod and informed the author of a security issue. I recommend anyone with this mod installed, disable it in product manager until an update is released.