43
e.g
In edit_content.php on line 69
$sqlinsert="UPDATE ".$xoopsDB->prefix(_MIC_CONTENT_PREFIX)." SET page_description='".addslashes($description)."', keywords='".$keywords."', parent_id='".intval($parent_id)."', title='".$title."', ptitle='".
$ptitle."', text='".addslashes($message)."', visible='".intval($visible)."', nohtml='".intval($nohtml)."', nosmiley='".intval($nosmiley)."', nobreaks='".
intval($nobreaks)."', nocomments='".intval($nocomments)."', address='".$externalURL."', submenu='".intval($submenu)."', newwindow='".
intval($newwindow)."', date=NOW(), link=0, header_img='" . $header_img . "' WHERE storyid='".intval($id)."'";
replace with:
$sqlinsert="UPDATE ".$xoopsDB->prefix(_MIC_CONTENT_PREFIX)." SET page_description='$description', keywords='".$keywords."', parent_id='".intval($parent_id)."', title='".$title."', ptitle='".
$ptitle."', text='$message', visible='".intval($visible)."', nohtml='".intval($nohtml)."', nosmiley='".intval($nosmiley)."', nobreaks='".
intval($nobreaks)."', nocomments='".intval($nocomments)."', address='".$externalURL."', submenu='".intval($submenu)."', newwindow='".
intval($newwindow)."', date=NOW(), link=0, header_img='" . $header_img . "' WHERE storyid='".intval($id)."'";
do the same with all the rest of addslashes.
Let me know if it works to you...