OK, it looks like I have stamped this one out, thanks to a simple fix in the vBulletin Forums. The interesting thing is that the regular expression was indeed illegal, but it was accepted by the old PHP/MySQL. When they upgraded, the new stuff checks better and flagged it.