schelly wrote:If all of the above doesn't solve the problem, you might visit the programmer's website. It seems like there are some other users who have the same issues:
Click Here
for his site. You'll probably have to register to see that link, but once you register it should lead you right to the appropriate post.
:side:
You are right the quick message problem has been fixed.
In pms.jim.php, after line 263:
[code:1]$newsub = htmlspecialchars($this->_getReqParam("newsub", null)); //urldecode done in _getReqParam[/code:1]
add the line:
[code:1]$newmsg = htmlentities($this->_getReqParam("newmsg", null)); //don't allow html input on user profile![/code:1]
This is posted at:
www.joomlation.eu