[] Are the parameters to authenticate() not necessary? I haven't figured out exactly how that function works.
Yes, the authentication function has been changed in V6, so all necessary parameters are set by default. Look at ubbt.inc.php for details.
There shouldn't be any difference betweem strcasecmp and strtolower, but i'll choose the first one cause i don't know how strtolower behaves on '"@| etc...
Yes, i missed the "!" before the statement, removed it for testing.
code:
$upandlow = 1; and $upandlow = true;
Both should work, i'm used to set boolean = true/false from java programming.
code:
$newmods_q = addslashes($newmods);
Yep, missed that one, thanx.

[] I've made some enhancements to my copy of the hack:
a) Expanded explanation of what the hack does in the entry form.
b) Added more safety checks, including those done by adduser.php.
Greatly appreciated
