[lierduh]

Originally Posted by Brad

If you are one of the people having issues with the last fix I posted, try using the attached file instead. Let me know if this one works or not.

PHP Code:

function bbcodeparser($text = '', $striphtml = true)
{
    global $vbulletin;

    if ($vbulletin->options['shout_bbcode'])
    {
        return $vbulletin->vbshout_parse->parse(convert_url_to_bbcode($text), 'nonforum');
    }
    else
    {
        return $text;
    }

    if ($striphtml)
    {
        $text = htmlspecialchars_uni($text);
    }
} 


Have not checked the rest of the script you attached, but what is the purpose of the last bit?

	if ($striphtml)
	{
		$text = htmlspecialchars_uni($text);
	}

I thought the latest version is supposed to filter out html tags to avoid java script inject. Your code seems on the surface to bypass the fix?