Looks like I forgot the addslashes() to that. That will have to be a manual edit to the code I'm afraid. I'll have to update the instructions. I don't know why I missed that. It's in my setup but not in the instructions.
There is one occurance in admin/functions.php that you'll need to change.
It's on or around line 869 and reads:
Code:
$DB_site->query("UPDATE forum SET lastactivethread = LEFT('".$threadinfo[title]."',$lastactivethread_length) WHERE forumid = ".$threadinfo[forumid]);
Change it to:
Code:
$DB_site->query("UPDATE forum SET lastactivethread = LEFT('".addslashes(htmlspecialchars($threadinfo[title]))."',$lastactivethread_length) WHERE forumid = ".$threadinfo[forumid]);
Sorry about that.