There is no addslashes function in list.php for $_POST["user_sug"]. Could be fixed in a similar way like in translate.php
Log in to post a comment.