i update this info on the editusers/editprofile script:
$email = addslashes(htmlspecialchars($_POST[email]));
$ehidden = htmlspecialchars($_POST[ehidden]);
$hname = addslashes(htmlspecialchars($_POST[hname]));
$favf = addslashes(htmlspecialchars($_POST[favf]));
$favh = addslashes(htmlspecialchars($_POST[favh]));
$location = addslashes(htmlspecialchars($_POST[location]));
$age = (int)addslashes(htmlspecialchars($_POST[age]));
$level = addslashes(htmlspecialchars($_POST[level]));
but on the system there's
id
username
password
email
location
userlevel
age
sex
date
pincode
ip
hname
favf
favh
That's Just The Drill