major security hole in uShop

Hi guys, i've noticed that if im in the shop and uses this link:
.../ushop.php?do=richestusers&page=<script>alert("Owne d%20By%20FatalBreeze")</script>

it works!!

maybe we should just add intval() or something like that?

as a noob coder im not exactly aware of the consequences this may have, but i guess they are pretty harsh.

btw, im using the latest version of uCash&uShop on vB 3.5.4.

[Zachery]

uCS is no longer supported, or developed and we've already made refrences to move off of it.