43
e.g
In edit_content.php on line 69
le="color: #000000"><?php $sqlinsert="UPDATE ".$xoopsDB->prefix(_MIC_CONTENT_PREFIX)." SET page_description='".addslashes($description)."', keywords='".$keywords."', parent_id='".intval($parent_id)."', title='".$title."', ptitle='". $ptitle."', text='".addslashes($message)."', visible='".intval($visible)."', nohtml='".intval($nohtml)."', nosmiley='".intval($nosmiley)."', nobreaks='". intval($nobreaks)."', nocomments='".intval($nocomments)."', address='".$externalURL."', submenu='".intval($submenu)."', newwindow='". intval($newwindow)."', date=NOW(), link=0, header_img='" . $header_img . "' WHERE storyid='".intval($id)."'";
replace with:
le="color: #000000"><?php $sqlinsert="UPDATE ".$xoopsDB->prefix(_MIC_CONTENT_PREFIX)." SET page_description='$description', keywords='".$keywords."', parent_id='".intval($parent_id)."', title='".$title."', ptitle='". $ptitle."', text='$message', visible='".intval($visible)."', nohtml='".intval($nohtml)."', nosmiley='".intval($nosmiley)."', nobreaks='". intval($nobreaks)."', nocomments='".intval($nocomments)."', address='".$externalURL."', submenu='".intval($submenu)."', newwindow='". intval($newwindow)."', date=NOW(), link=0, header_img='" . $header_img . "' WHERE storyid='".intval($id)."'";
do the same with all the rest of addslashes.
Let me know if it works to you...