(04-08-2009 05:52 AM)faviouz Wrote:  Got a PM from Michael83 on MyBBoard.net

Michael83 Wrote:To fix this open the plugin file rep.php and search for:

PHP Code:

$query=$db->query("SELECT * FROM ".TABLE_PREFIX."users WHERE username='$post[userusername]'"); 


Replace with:

PHP Code:

$query=$db->query("SELECT * FROM ".TABLE_PREFIX."users WHERE username='".$db->escape_string($post['userusername'])."'"); 


You might want to give him credits, not sure if it's in the license/whatever.

However... I know how to do this but I'm very busy (making a secret plugin)...