Details
-
Bug
-
Status: Closed (View Workflow)
-
Resolution: Fixed
-
3.0.RC7
-
None
-
PHP Environment:
Database:
Description
In posting.php there is this:
if ($mode == 'quote' && !$submit && !$preview && !$refresh)
|
{
|
$message_parser->message = '[quote="' . $post_data['quote_username'] . '"]' . censor_text(trim($message_parser->message)) . "[/quote]\n";
|
}
|
When quoting a post, this is not escaped properly, it should be ".