A quick fix against RFP2101 - PHP-Nuke v4.4 and below allows users to steal accounts via sql hacking.