[KuraFire]

Ah, yes, I haven't htmlspecialchar'd the inputs, since on my own board I use no ""s around quotes. If you want them to display around each quote (ie. "this is a quote") you should better just add " in your templates. Much easier to take them off again if you decide to, at one point.

To fix that problem though, find in your admin/quotes.php this line:

PHP Code:

$quote=$DB_site->query_first("SELECT * FROM quotes WHERE id=$quoteid"); 


And add below it:

PHP Code:

$quote[quote] = htmlspecialchars($quote[quote]); 


(if you use ""s in your name input as well, add `$quote[name] = htmlspecialchars($quote[name]);` below that).


The other issue: if you save without a letter, the quote will not show up in the Quotes List, Ever. And if you intend to disband the Quoter (Name) part, you can just fill in a dash ( - ) or so for the quoter name, or "Unknown" or whatever. Filling in nothing is a bad idea.