bugzbrown

You can fix this really quick with replacing mysql_real_escape_string() for esc_sql().

A simple find and replace in pf-404.php will do the trick.

Hope this helps.