danger in the WHMCS code
 

any one using this code you are in danger of outsiders gaining access to you sites admin panel and all info in is.
this can be done from the basic users account by simply changing there name to a unsterilized text and it well change there name to all admins
username
email
password

Please watch you sites logs for users changing there names to a sql query.

I wont show the code that was used for safty resons but I have tested it on 2 Version
of the code and was able to retrieve both sites admin info.

hi
 

yes where upgrading the whmcs. 5.2.8 later today