$instr = "'" . str_replace(",", "','", $vbulletin->options['creditsys_filetypes']) . "'";$sqlwhere = "WHERE attachment.extension IN(" . $instr . ")";