#9 Lack of htmlentities

[Anonymous]

I feel this has perhaps been overlooked:

<div class="quote_output">
<?=nl2br(htmlentities($row["quote"]) .
"\n");?>
</div>

The above simple change to the [r/b]ash_output.php is all
that's required. Without this, IRC <quotes> get treated
like HTML tags which for obvious reasons causes output
to break.

Liking the system so far (although I did modify it so
quotes don't have to be approved - this doesn't suit my
use)

Thanks and keep up the good work,

Robert

sourceforge@m33p.be
http://m33p.be/

[Nobody/Anonymous]

Logged In: NO

Appologies - 2nd created from refreshing page to check for
update!

While I'm at it though, the above can be disregarded.