[Boofo]

Originally posted by Mutt
[B]Boofo, thanks for the title fix, I like it.

You're very welcome. I also have a fix for anyone who wants to turn off the quote feature (but leave the title and name) for any given user (like if they have certain vbcode they use that they don't want anyone finding out about by quoting the message).

as for the 2 htmlspecialchar lines, I'm not sure, but they were in the quote code from newreply.php so I left them.

I didn't find them in my code (2.2.9) but it works fine without them so you can take them out if you want.

the security checks were someone couldn't hit the pm quote link in a thread they had access to and then manually change the url to a different postid that they can't see. without the checks, someone could theoretically see a post they shouldn't. I 'm 90% sure that the checks in there now are sufficient. I was hoping someone else might be able to give it the thumbs up or perhaps even simplify the checks. I guess I should have just looked at the showpost code from showthread, but I didn't think of that until just now

Ok, I see what you meant now. Changing the link itself. Ahhh...I didn't even catch that. Good eyes!