[AN-net]

Security Update:

The following XSS Vulnerability was found by KirbyDE on 09/22/05.

The zip has been updated with the patched journal.php file.

For those who rather do a manual update simply open journal.php in your favorite text editor and find:

PHP Code:

$reccom['coment_text']= htmlspecialchars_uni($reccom['comment_text']); 


Replace that line with:

PHP Code:

$reccom['comment_text']= htmlspecialchars_uni($reccom['comment_text']); 


Sry for the security hole but even typos can do the darndest things.