MyBB Community Forums

Hi,
I've installed the thread description plugin (http://mods.mybb.com/view/thread-description-mybb-es).
But when there is an apostrophe in the description, mybb return an error :

MyBB has experienced an internal SQL error and cannot continue.

SQL Error:
1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'fr' WHERE tid=55' at line 1
Query:
UPDATE mybb_threads SET threadsdesc='test tèst à@èé&'fr' WHERE tid=55

There is no problem for the others characters.

Looks like somebody forgot to escape their inputs... I'd advise not using this plugin as it's vulnerable to SQL injections.

I uninstall this plugin and install XThreads, no problem with it.
Thanks for the advice ;-)

Update plugin, fix problems
sorry for this problem

Sorry I'm latino americano, speak spanish not english.