BuddyPress.org

I wrote this while I was tired last night, you should cleanse the input on line 15 with:
$input = htmlspecialchars($_POST['input']);

That should prevent SQL injections by converting quotes and other special characters into their HTML values… See here for more details.

Any questions, feel free to ask, I’ll keep an eye on this thread for ya.