[renancavalieri]

Originally Posted by KyleS Please look at SQL_EscapeString. Users can destroy your database with a bad name, or give bad arguments to your plugin... EDIT: Also, you need to check the returns from your String Initialization functions if you're using decl.

Fixed on 1.0.2, now are safe