diff -Nur class.orig/data/kses.class.php class/data/kses.class.php--- class.orig/data/kses.class.php 2007-03-20 20:40:22.000000000 +0800+++ class/data/kses.class.php 2007-04-10 10:42:10.601863738 +0800@@ -76,10 +76,13 @@ function Parse($string = "") {+/* we already handle magic_quotes_gpc in class/net/request.class.php+ so don't do it again. if (get_magic_quotes_gpc()) { $string = stripslashes($string); }+*/ $string = $this->_no_null($string); $string = $this->_js_entities($string); $string = $this->_normalize_entities($string);@@ -759,4 +762,4 @@ return '0.0.2 (OOP fork of kses 0.2.1)'; } # function _version }-?>\ No newline at end of file+?>diff -Nur class.orig/database/db.class.php class/database/db.class.php--- class.orig/database/db.class.php 2007-03-20 20:40:21.000000000 +0800+++ class/database/db.class.php 2007-04-10 10:42:13.009975865 +0800@@ -156,6 +156,8 @@ */ function qstr($string) { +/* we already handle magic_quotes_gpc in class/net/request.class.php+ so don't do it again. if (get_magic_quotes_gpc()) { $string = stripslashes($string); //$string = stripslashes($string);@@ -163,6 +165,7 @@ $string = str_replace("\\'", "'", $string); $string = str_replace('\\"', '"', $string); }+*/ $string = str_replace("\\", "\\\\", $string); $string = str_replace("'", "''", $string);@@ -170,4 +173,4 @@ return $string; } }-?>\ No newline at end of file+?>