>Xoops settings : admin > system admin > preferences > >html OFF (for what >do you think that exist this ??) The webmaster must do it himself, I said that if he doesn't make care, some code will be insert. That's why I called it vulnerability and not hole as you said (there's a difference). >Nopes we can't add all new vulnerability to the >textsanitizer, But that's what the french team tell me by mail. And you can also see it on this link: http://www.frxoops.org/modules/news/article.php?storyid=576. So if XOOPS team gives wrong informations, I'm not responsible for this kind of error. dAs http://www.echu.org