Index: /profile.lastvisitors/files/lib/system/event/listener/ProfilelastVisitorsRenameListener.class.php
===================================================================
--- /profile.lastvisitors/files/lib/system/event/listener/ProfilelastVisitorsRenameListener.class.php (revision 505)
+++ /profile.lastvisitors/files/lib/system/event/listener/ProfilelastVisitorsRenameListener.class.php (revision 506)
@@ -17,5 +17,5 @@
         //Hier wird der Username in der Datenbank von dem alten auf den neuen Usernamen geÀndert.
         $sql = "UPDATE wcf".WCF_N."_profile_lastvisitors
-        		SET username = '".$this->username."'
+        		SET username = '".escapeString($this->username)."'
         		WHERE userID = '".WCF::getUser()->userID."'";
         WCF::getDB()->sendQuery($sql);