[AN-net]

Originally Posted by tmhall

Hmm... I'm not sure exactly what you're asking for, but after comparing the new journal.php against the old I found this:

PHP Code:

$entry['entrytext']= parse_bbcode2($entry['entrytext'], 0, $setting['allow_imgcode'], $setting['allow_smilies'], $setting['allow_bbcode']); 


And added this after:

PHP Code:

$entry['entrytext']= unhtmlspecialchars(stripslashes($entry['entrytext']));
$entry['entrytitle']= stripslashes($entry['entrytitle']); 


And that seems to have fixed my problem (for the entries, anyway).

that leaves you vulnerable via journal entry text. i mean can someone go into phpmyadmin and just give what is in the title for a journal entry that is having the slash problem.