Staff Holiday Manager

When register globals set to off (as it should always
be) in activate.php the following line:

$query=mysql_query("UPDATE users SET Pass=MD5('$pass'),
active='y' WHERE ID = $ID");

Must be replaced by:

$query=mysql_query("UPDATE users SET
Pass=MD5('".$_POST["pass2"]."'), active='y' WHERE ID =
$ID");

Cheers
Antoine.