[calorie]

<font face="Courier New">
While I cannot guarantee completeness, accuracy, or support, here are some LFDB hack suggestions. The input is checked (intval, addslashes, etcetera) but there are spots that do not set default values or check permissions should someone save the HTML, mess with the HTML, and then submit changes to the script, or should someone alter or create a query string and submit changes that way. For example, a user who does not have permission to add a link could set $action to doaddlink and add a link even though, when $action is set to addlink, the user is told to bugger off. Another example is when $action is set to dosendtofriend. Pass the appropriate variables and send email even though, when $action is set to sendtofriend, permissions are checked. Suggestions, FWIW.
</font>