fix how playSMS handle magic_quote_gpc option OFF, again ^^ this will fix most security related to SQL injection (pls feedback)
if data coming from $_REQUEST then you dont need to addslashes it since we already do that on init.php (pl_addslashes when magic_quote_gpc OFF)
comment logger_print() on setsmsdeliverystatus(), too noisy