Is it to late to fix?

did you change ANYTHING at all during this thread other than the url.php file?

Carbonize wrote:I wonder if you are all on the same host anyway for a quick test (need to narrow down the problem) put // at the start of line 91 like so//$MESSAGE = nl2br($row['comment']);

I did do this, would that cause it?

Shouldn't do but no harm in removing the //

That was it. Looking good now, Thanks for your time on that. I guess I need to get on the mailing list for updates.

When you find that list let me know lol.

Well that hacker did me a favour. I don't think he editted the files in question using the guestbook though as they didn't have the files chmod'd. Anyway I used his file explorer program to patch their guestbooks then fix the url.php file. I need a life

(