MyBB Community Forums

Hi,

First the query to check for duplicates is performed

WHERE LOWER(u.username)='".$db->escape_string(my_strtolower($mybb->get_input('to')))."'

and afterwards the recipient list is split into the single recipients...

// Split up any recipients we have
	$pm['to'] = explode(",", $mybb->get_input('to'));

Should be the other way round e.g. with an in-sql statement...

Hi,

Thank you for your report. We have pushed this issue to our Github repository for further analysis where you can track our commits and progress with fixing this bug. Discussions regarding this bug may also take place there too.

Follow this link to visit the issue on Github: https://github.com/mybb/mybb/issues/1978

Thanks for contributing to MyBB!

Regards,
The MyBB Group