Thread: YSE v2.0 PRE6
View Single Post
  #7  
Old 29th July 2009, 13:56
kp380lv's Avatar
kp380lv kp380lv is offline
Senior Member
  
Join Date: May 2008
Latvia
Posts: 388
Lightbulb
AlaminT

news.php

Code:
$body = $_POST["body"];
should be:

Code:
$body = htmlspecialchars($_POST["body"],ENT_QUOTES);
I hope you understand what about i'm talking..