Boofo, thanks for the title fix, I like it.
as for the 2 htmlspecialchar lines, I'm not sure, but they were in the quote code from newreply.php so I left them.
the security checks were someone couldn't hit the pm quote link in a thread they had access to and then manually change the url to a differnet postid that they can't see. whithout the checks, someone could theoretically see a post they shouldn't. I 'm 90% sure that the checks in there now are sufficent. I was hoping someone else might be able to give it the thumbs up or perhapos even simplify the checks. I guess I should have just looked at the showpost code from showthread, but I didn't think of that until just now
Mist, vb3 is a coming. I need to get back into the swing of things. :classic: