bullseye

This wouldn't stop the display pic hack tho would it If it dont you could use some think like $_POST['newpic']=str_replace('action','', $_POST['newpic']);

Thank You any more people want to comment

Hello there i thourght i would Recode battle tent and secure it so heres what i made   <?php include(DIRNAME(__FILE__).'/globals.php'); /* Modification Made By Bullseye Battle Tent Modification For McCodes V2 Free Modification Do Not Try To Sell This Free Modification */ echo '<h3>Battle Tent</h3>'; echo '[b]Welcome to the battle tent! Here you can challenge NPCs for money.[/b]'; echo '<table width=100% cellspacing=1 class="table"><tr style="background: gray; ">'; echo '<th>Bot Name</th>'; echo '<th>Level</th>'; echo '<th>Times Owned</th>'; echo '<th>Ready To Fight?</th>'; echo '<th>Location</th>'; echo '<th>Money Won</th>'; echo '<th>Challenge</th>'; echo '</tr>'; $select = sprintf("SELECT cb.*,u.*,c.npcid,cy.cityname FROM challengebots cb LEFT JOIN users u ON cb.cb_npcid=u.userid LEFT JOIN challengesbeaten c ON c.npcid=u.userid AND c.userid=%u LEFT JOIN cities cy ON u.location=cy.cityid",$userid); $q=$db->query($select); while($r=$db->fetch_row($q)) { $earn = $r['cb_money']; $v = $userid; $get = sprintf("SELECT count(*) FROM challengesbeaten WHERE npcid=%u",$v); $q2=$db->query($get); $times=$db->fetch_single($q2); echo '<tr>'; echo sprintf("<td>%s</td>",stripslashes(htmlspecialchars($r['username']))); echo sprintf("<td>%u</td>",number_format($r['level'])); echo sprintf("<td>%u</td><td>",$times); if($r['hp'] >= $r['maxhp']/2 and $r['location']==$ir['location'] and !$ir['hospital'] and !$ir['jail'] and !$r['hospital'] and !$r['jail']) { echo '<font color=green>Yes</font>'; } else { echo '<font color=red>No</font>'; } echo '</td>'; echo sprintf("<td>%s</td>",stripslashes(htmlspecialchars($r['cityname']))); echo sprintf("<td>$%s</td>",number_format($earn)); echo '<td>'; if($r['npcid']) { echo '[i]Already[/i]'; } else { echo sprintf("[url='attack.php?ID=%u']Challenge[/url]",$r['userid']); } echo '</td>'; echo '</tr>'; } echo '</table>'; $h->endpage(); ?> Hope fully people will use it :) +1 me if you wish