In private.php
Find code:
eval("standardredirect(\"".gettemplate("redirect_p mdelete")."\",\"private.php?s=$session[sessionhash]&folderid=$thisfolder\");");
}
But instead of the above I find this in private.php:
eval("standardredirect(\"".gettemplate("redirect_p mdelete")."\",\"private.php?s=$session[sessionhash]&folderid=".intval($thisfolder)."\");");
}
What do I do now?