Can Accounts get 'SQL injected'?

[Sheen]

Hello,

I have a stupid hacker on my forums who is somehow getting on my members accounts, he says he injected them, how is this possible?

And how do I protect my forum from sql injections?

[Steve Machol]

Please see this: How To Make My Forums More Secure (http://www.vbulletin.com/forum/showthread.php?t=172234)