rendered paste body<?php$vbulletin->input->clean_array_gpc('p', array( 'name' => TYPE_NOHTML, 'age' => TYPE_UINT, 'location' => TYPE_NOHTML, 'email' => TYPE_NOHTML, 'book' => TYPE_NOHTML, 'movie' => TYPE_NOHTML, 'interests' => TYPE_NOHTML, 'dislikes' => TYPE_NOHTML, 'bands' => TYPE_NOHTML, 'music' => TYPE_NOHTML, 'composers' => TYPE_NOHTML, 'status' => TYPE_NOHTML, 'staffsince' => TYPE_UINT, 'img' => TYPE_NOHTML)); $sql = "INSERT INTO " . TABLE_PREFIX . "staffiles WHERE userid='" . $db->escape_string($vbulletin->userinfo['userid']) . "' SET name='" . $db->escape_string($vbulletin->GPC['name']) . "', age='" . $db->escape_string($vbulletin->GPC['age']) . "', location='" . $db->escape_string($vbulletin->GPC['location']) . "', email='" . $POST['email']) . "', favbook='" . $db->escape_string($vbulletin->GPC['book']) . "', favmov='" . $db->escape_string($vbulletin->GPC['movie']) . "', interests='" . $db->escape_string($vbulletin->GPC['interests']) . "', dislikes='" . $db->escape_string($vbulletin->GPC['dislikes']) . "', favbands='" . $db->escape_string($vbulletin->GPC['bands']) . "', favmusic='" . $db->escape_string($vbulletin->GPC['music']) . "', favcomp='" . $db->escape_string($vbulletin->GPC['composers']) . "', status='" . $db->escape_string($vbulletin->GPC['status']) ."', staffsince='" . $db->escape_string($vbulletin->GPC['staffsince']) . "', img='" . $db->escape_string($vbulletin->GPC['img']) . "'";