Here's the solution:

After you have installed the shoutbox please modify the file sboxDB.php.

Please search for

Code:

Code: [Select]

// handle special characters

$content = addslashes($piph . $content);

and replace this with

Code:

Code: [Select]

// handle special characters

$content = addslashes($piph . $content);

// enquote html and script code to avoid html/javascript injection

$content = htmlentities($content, ENT_QUOTES);

[ reply ]