diff -ur forum-server/feed.php forum-server.new/feed.php
--- forum-server/feed.php	2009-09-05 04:52:49.000000000 -0400
+++ forum-server.new/feed.php	2010-02-10 01:04:50.000000000 -0500
@@ -50,14 +50,14 @@
 			//$title = __("Topic:", "vasthtml")." ".$vasthtml->get_subject($post->parent_id);
 			$title = $post->subject;
 		echo "<item>\n
-			<title>" . htmlspecialchars($title) . "</title>\n
+			<title>" . stripslashes(htmlspecialchars($title)) . "</title>\n
 			<description>".htmlspecialchars($vasthtml->output_filter($post->text, ENT_NOQUOTES))."</description>\n
 			<link>".htmlspecialchars($link)."</link>\n
-			<author>feeds@r.us</author>\n
+			<author>".$user->user_login."</author>\n
 			<pubDate>".date("r", strtotime($post->date))."</pubDate>\n
 			<guid>".htmlspecialchars($link."&guid=$post->id")."</guid>
 			</item>\n\n";
 		}
 		?>
 		</channel>
-		</rss>
\ No newline at end of file
+		</rss>
diff -ur forum-server/wpf.class.php forum-server.new/wpf.class.php
--- forum-server/wpf.class.php	2009-09-05 04:52:49.000000000 -0400
+++ forum-server.new/wpf.class.php	2010-03-03 16:38:48.000000000 -0500
@@ -65,11 +65,11 @@
 		$this->login_link 		= $this->path."/wp-login.php?redirect_to=".PHP_SELF."";
 		$this->profile_link 	= $this->path."/wp-admin/profile.php";
 		
-		$this->thread_link		= $this->path."/?page_id=$this->page_id&amp;vasthtmlaction=showthread&thread";
+		$this->thread_link		= $this->path."/?page_id=$this->page_id&vasthtmlaction=showthread&thread";
 		
-		$this->profil_link 		= $this->path."/?page_id=$this->page_id&amp;vasthtmlaction=showprofile&amp;user";
-		$this->search_link		= $this->path."/?page_id=$this->page_id&amp;vasthtmlaction=search&";
-		$this->grouplogin_link	= $this->path."/?page_id=$this->page_id&amp;vasthtmlaction=grouplogin&group";
+		$this->profil_link 		= $this->path."/?page_id=$this->page_id&vasthtmlaction=showprofile&user";
+		$this->search_link		= $this->path."/?page_id=$this->page_id&vasthtmlaction=search&";
+		$this->grouplogin_link	= $this->path."/?page_id=$this->page_id&vasthtmlaction=grouplogin&group";
 		
 		$this->t_groups 		= $table_prefix."forum_groups";
 		$this->t_forums 		= $table_prefix."forum_forums";
@@ -120,11 +120,11 @@
 	// Add admin pages
 	function add_admin_pages(){
 		add_menu_page('Forum Server', 'Forum Server', 8, 'forum-server/fs-admin/fs-admin.php', '', WPFURL."images/logo.png");	
-		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Skins', 'Skins', 8,"admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=skins"); 
-		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Categories & Forums', 'Categories & Forums', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=structure");
-		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Moderators', 'Moderators', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=moderators");
-		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'User Groups', 'User Groups', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=usergroups");
-		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'About', 'About', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&amp;vasthtml_action=about");
+		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Skins', 'Skins', 8,"admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=skins"); 
+		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Categories & Forums', 'Categories & Forums', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=structure");
+		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'Moderators', 'Moderators', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=moderators");
+		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'User Groups', 'User Groups', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=usergroups");
+		add_submenu_page('forum-server/fs-admin/fs-admin.php', 'About', 'About', 8, "admin.php?page=forum-server/fs-admin/fs-admin.php&vasthtml_action=about");
 	}
 	
 	// ... and some styling and meta
@@ -226,14 +226,14 @@
 		if($wp_rewrite->using_permalinks())
 			$delim = "?";
 		else
-			$delim = "&amp;";
+			$delim = "&";
 		$perm = get_permalink($this->page_id);
 		
-		$this->forum_link 		= $perm.$delim."vasthtmlaction=viewforum&amp;f=";
-		$this->group_link 		= $perm.$delim."vasthtmlaction=vforum&amp;g=";
-		$this->thread_link 		= $perm.$delim."vasthtmlaction=viewtopic&amp;t=";
-		$this->add_topic_link 	= $perm.$delim."vasthtmlaction=addtopic&amp;forum=$this->current_forum";
-		$this->post_reply_link 	= $perm.$delim."vasthtmlaction=postreply&amp;thread=$this->current_thread";
+		$this->forum_link 		= $perm.$delim."vasthtmlaction=viewforum&f=";
+		$this->group_link 		= $perm.$delim."vasthtmlaction=vforum&g=";
+		$this->thread_link 		= $perm.$delim."vasthtmlaction=viewtopic&t=";
+		$this->add_topic_link 	= $perm.$delim."vasthtmlaction=addtopic&forum=$this->current_forum";
+		$this->post_reply_link 	= $perm.$delim."vasthtmlaction=postreply&thread=$this->current_thread";
 		$this->base_url			= $perm.$delim."vasthtmlaction=";
 		$this->reg_link 		= $this->path."/wp-register.php?redirect_to=";
 		$this->topic_feed_url	= WPFURL."feed.php?topic=";
@@ -247,14 +247,14 @@
 		if($wp_rewrite->using_permalinks())
 			$delim = "?";
 		else
-			$delim = "&amp;";
+			$delim = "&";
 		
 		
-		$this->forum_link 		= $perm.$delim."vasthtmlaction=viewforum&amp;f=";
-		$this->group_link 		= $perm.$delim."vasthtmlaction=vforum&amp;g=";
-		$this->thread_link 		= $perm.$delim."vasthtmlaction=viewtopic&amp;t=";
-		$this->add_topic_link 	= $perm.$delim."vasthtmlaction=addtopic&amp;forum=$this->current_forum";
-		$this->post_reply_link 	= $perm.$delim."vasthtmlaction=postreply&amp;thread=$this->current_thread";
+		$this->forum_link 		= $perm.$delim."vasthtmlaction=viewforum&f=";
+		$this->group_link 		= $perm.$delim."vasthtmlaction=vforum&g=";
+		$this->thread_link 		= $perm.$delim."vasthtmlaction=viewtopic&t=";
+		$this->add_topic_link 	= $perm.$delim."vasthtmlaction=addtopic&forum=$this->current_forum";
+		$this->post_reply_link 	= $perm.$delim."vasthtmlaction=postreply&thread=$this->current_thread";
 		$this->base_url			= $perm.$delim."vasthtmlaction=";
 		$this->reg_link 		= $this->path."/wp-register.php?redirect_to=";
 		$this->topic_feed_url	= WPFURL."feed.php?topic=";
@@ -276,7 +276,8 @@
 		return $this->group_link.$id.".$this->curr_page";
 	}
 	function get_threadlink($id){
-		return $this->thread_link.$id.".$this->curr_page";
+		//return $this->thread_link.$id.".$this->curr_page";
+		return $this->thread_link.$id.".0";
 	}
 	function get_pageid(){
 		global $wpdb;
@@ -434,6 +435,7 @@
 			<small>$load</small>
 		</div>";
 		
+		$this->o = str_replace('$', '\$', $this->o);
 		return preg_replace('|<!--VASTHTML-->|', "<div id='wpf-wrapper'>".$this->o."</div>", $content);
 
 	}
@@ -535,7 +537,7 @@
 								.$this->output_filter($thread->subject)."</a>".$this->get_pagelinks($thread->id)."&nbsp;&nbsp;$image</span> $del
 							</td>
 							<td>".$this->profile_link($thread->starter)."</td>
-							<td class='wpf-alt $sticky' align='center'>".$this->num_posts($thread->id)."</td>
+							<td class='wpf-alt $sticky' align='center'>".($this->num_posts($thread->id)-1)."</td>
 							<td class='wpf-alt $sticky' align='center'>".$thread->views."</td>
 							<td><small>".$this->get_lastpost($thread->id)."</small></td>
 						</tr>";
@@ -568,7 +570,7 @@
 								.$this->output_filter($thread->subject)."</a>".$this->get_pagelinks($thread->id)."&nbsp;&nbsp;$image</span> $del
 							</td>
 							<td>".$this->profile_link($thread->starter)."</td>
-							<td class='wpf-alt $sticky' align='center'>".$this->num_posts($thread->id)."</td>
+							<td class='wpf-alt $sticky' align='center'>".($this->num_posts($thread->id)-1)."</td>
 							<td class='wpf-alt $sticky' align='center'>".$thread->views."</td>
 							<td><small>".$this->get_lastpost($thread->id)."</small></td>
 						</tr>";
@@ -699,11 +701,11 @@
 					<td>$image <strong>".$this->get_postname($post_id)."</strong><br /><small><strong>on: </strong>".$this->get_postdate($post_id)."</small></td>";
 					
 					if(is_user_logged_in())
-						 $o .= "<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/quote.gif' alt='' align='left'><a href='$this->post_reply_link&amp;quote=$post_id.$this->curr_page'> ".__("Quote", "vasthtml")."</a></td>";
+						 $o .= "<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/quote.gif' alt='' align='left'><a href='$this->post_reply_link&quote=$post_id.$this->curr_page'> ".__("Quote", "vasthtml")."</a></td>";
 						
 					if($this->is_moderator($user_ID, $this->current_forum) || $user_ID == $author_id)
-						 $o .= "<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/delete.gif' alt='' align='left'><a onclick=\"return wpf_confirm();\" href='".$this->get_threadlink($this->current_thread)."&amp;remove_post&amp;id=$post_id'> ".__("Remove", "vasthtml")."</a></td>
-								<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/modify.gif' alt='' align='left'><a href='".$this->base_url."editpost&amp;id=$post_id&amp;t=$this->current_thread.0'>" .__("Edit", "vasthtml")."</a></td>";
+						 $o .= "<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/delete.gif' alt='' align='left'><a onclick=\"return wpf_confirm();\" href='".$this->get_threadlink($this->current_thread)."&remove_post&id=$post_id'> ".__("Remove", "vasthtml")."</a></td>
+								<td nowrap='nowrap' width='10%'><img src='$this->skin_url/images/buttons/modify.gif' alt='' align='left'><a href='".$this->base_url."editpost&id=$post_id&t=$this->current_thread.0'>" .__("Edit", "vasthtml")."</a></td>";
 				$o .= "</tr>
 			</table>";
 		
@@ -988,20 +990,21 @@
 	// Some SEO friendly stuff
 	function get_pagetitle($bef_title){
 	global $wpdb;
-		$default_title = " &raquo; ";
+		$default_title = " | ";
 				
 
 		switch($_GET['vasthtmlaction']){
 			case "viewforum": 
-				$title = $default_title.$this->get_groupname($this->get_parent_id(FORUM, $this->check_parms($_GET['f'])))." &raquo; ".$this->get_forumname($this->check_parms($_GET['f']));
+				$title = $default_title.$this->get_groupname($this->get_parent_id(FORUM, $this->check_parms($_GET['f'])))." | ".$this->get_forumname($this->check_parms($_GET['f']));
 				break;
 			case "viewtopic": 
 				$group = $this->get_groupname($this->get_parent_id(FORUM, $this->get_parent_id(THREAD, $this->check_parms($_GET['t']))));
-				$title = $default_title.$group." &raquo; ".$this->get_forumname($this->get_parent_id(THREAD, $this->check_parms($_GET['t'])))." &raquo; ".$this->get_threadname($this->check_parms($_GET['t']));
+				//$title = $default_title.$group." | ".$this->get_forumname($this->get_parent_id(THREAD, $this->check_parms($_GET['t'])))." | ".$this->get_threadname($this->check_parms($_GET['t']));
+				$title = $default_title.$group." | ".$this->get_threadname($this->check_parms($_GET['t']));
 				break;
 			case "search": 
 				$terms = $wpdb->escape($_POST['wpf_search_string']);
-				$title = $default_title.__("Search Results", "vasthtml"). " &raquo; $terms";
+				$title = $default_title.__("Search Results", "vasthtml"). " | $terms";
 				break;
 			case "profile": 
 				$title = $default_title.__("Profile", "vasthtml")."";
@@ -1240,14 +1243,14 @@
 				$class= "maintab";
 			if($this->is_moderator($user_ID, $this->current_forum)){
 				if($this->is_sticky())
-					$stick = "<td class='".$class."_back' nowrap='nowrap'><a href='".$this->get_threadlink($this->current_thread)."&amp;sticky&amp;id=$this->current_thread'>".__("Unmark as Sticky", "vasthtml")."</a></td>";
+					$stick = "<td class='".$class."_back' nowrap='nowrap'><a href='".$this->get_threadlink($this->current_thread)."&sticky&id=$this->current_thread'>".__("Unmark as Sticky", "vasthtml")."</a></td>";
 				else
-					$stick = "<td class='".$class."_back' nowrap='nowrap'><a href='".$this->get_threadlink($this->current_thread)."&amp;sticky&amp;id=$this->current_thread'>".__("Mark as sticky", "vasthtml")."</a></td>";
+					$stick = "<td class='".$class."_back' nowrap='nowrap'><a href='".$this->get_threadlink($this->current_thread)."&sticky&id=$this->current_thread'>".__("Mark as sticky", "vasthtml")."</a></td>";
 				}
 				$menu .= "<table cellpadding='0' cellspacing='0' style='margin-right:10px;' id='topicmenu'>";
 				$menu .= "<tr><td class='".$class."_first'>&nbsp;</td>
 						<td valign='top' class='".$class."_back' nowrap='nowrap'><a href='".$this->get_post_reply_link()."'>".__("Reply", "vasthtml")."</a></td>
-						<td class='".$class."_back' nowrap='nowrap'><a onclick='return notify();' href='".$this->get_threadlink($this->current_thread)."&amp;notify&amp;id=$this->current_thread'>".__("Notify", "vasthtml")."</a></td>
+						<td class='".$class."_back' nowrap='nowrap'><a onclick='return notify();' href='".$this->get_threadlink($this->current_thread)."&notify&id=$this->current_thread'>".__("Notify", "vasthtml")."</a></td>
 						<td class='".$class."_back' nowrap='nowrap'><a href='$this->topic_feed_url"."$this->current_thread'>".__("RSS feed", "vasthtml")."</a></td>
 						$stick
 						<td valign='top' class='".$class."_last'>&nbsp;&nbsp;</td>
@@ -1260,7 +1263,7 @@
 			global $user_ID;
 			$this->setup_links();
 			
-			$link = "<a href='".$this->base_url."profile&amp;id=$user_ID' title='".__("My profile", "vasthtml")."'>".__("My Profile", "vasthtml")."</a>";
+			$link = "<a href='".$this->base_url."profile&id=$user_ID' title='".__("My profile", "vasthtml")."'>".__("My Profile", "vasthtml")."</a>";
 
 			$menuitems = array(	
 							"home" 	=> "<a href='".$this->home_url."'>".__("Home", "vasthtml")."</a>", 
@@ -1270,8 +1273,8 @@
 							"reply" 	=> "<a href='".$this->get_post_reply_link()."'>".__("Reply", "vasthtml")."</a>",
 							"new_topic" => "<a href='".$this->get_addtopic_link()."'>".__("New Topic", "vasthtml")."</a>",
 							"feed" 		=> "<a href='$this->topic_feed_url"."$this->current_thread'>".__("Feed", "vasthtml")."</a>",
-							"sticky" 	=> "<a href='".$this->get_threadlink($this->current_thread)."&amp;sticky&amp;id=$this->current_thread'>".__("Mark as Sticky", "vasthtml")."</a>",
-							"unsticky" 	=> "<a href='".$this->get_threadlink($this->current_thread)."&amp;sticky&amp;id=$this->current_thread'>".__("Unmark as sticky", "vasthtml")."</a>"
+							"sticky" 	=> "<a href='".$this->get_threadlink($this->current_thread)."&sticky&id=$this->current_thread'>".__("Mark as Sticky", "vasthtml")."</a>",
+							"unsticky" 	=> "<a href='".$this->get_threadlink($this->current_thread)."&sticky&id=$this->current_thread'>".__("Unmark as sticky", "vasthtml")."</a>"
 						);
 				
 				if($user_ID || $this->allow_unreg()){
@@ -1414,13 +1417,13 @@
 		$trail = "<a href='".get_permalink($this->page_id)."'>Forum</a>";
 
 		if($this->current_group)
-			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."vforum&amp;g=$this->current_group.0'>".$this->get_groupname($this->current_group)."</a>";
+			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."vforum&g=$this->current_group.0'>".$this->get_groupname($this->current_group)."</a>";
 
 		if($this->current_forum)
-			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."viewforum&amp;f=$this->current_forum.0'>".$this->get_forumname($this->current_forum)."</a>";
+			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."viewforum&f=$this->current_forum.0'>".$this->get_forumname($this->current_forum)."</a>";
 			
 		if($this->current_thread)
-			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."viewtopic&amp;t=$this->current_thread.$this->curr_page'>".$this->get_threadname($this->current_thread)."</a>";
+			$trail .= " <strong>&raquo;</strong> <a href='$this->base_url"."viewtopic&t=$this->current_thread.$this->curr_page'>".$this->get_threadname($this->current_thread)."</a>";
 		
 		if($this->current_view == NEWTOPICS)
 			$trail .= " <strong>&raquo;</strong> ".__("New Topics since last visit", "vasthtml");
@@ -1515,7 +1518,8 @@
 					<tr id='upshrinkHeader2' >
 						<th class='wpf-bright right' $colspan= align='right'>
 							<div>
-								<form name='wpf_search_form' method='post' action='$this->base_url"."search'>
+								<form name='wpf_search_form' method='get' action='$this->base_url"."search'>
+									<input type='hidden' name='vasthtmlaction' value='search'>
 									<input type='text' name='search_words' />
 									<input type='submit' name='search_submit' value='".__("Search", "vasthtml")."' />
 								</form>
@@ -1686,7 +1690,7 @@
 			if($user_op['allow_profile'] == false)
 				return $user;
 
-		$link = "<a href='".$this->base_url."profile&amp;id=$user_id' title='".__("View profile", "vasthtml")."'>$user</a>";
+		$link = "<a href='".$this->base_url."profile&id=$user_id' title='".__("View profile", "vasthtml")."'>$user</a>";
 		return $link;
 	}
 	
@@ -1864,10 +1868,10 @@
 		$this->current_view = SEARCH;
 		$this->header();
 		
-		if(!isset($_POST['search_submit'])){
+		if(!isset($_GET['search_words'])){
 		$groups = $this->get_groups();
 
-			$o .= "<div class='wpf' style='margin:0 auto;'><form name='wpf_searchform' method='post' action=''>
+			$o .= "<div class='wpf' style='margin:0 auto;'><form name='wpf_searchform' method='get' action=''>
 					<table class='wpf-table search' cellspacing='0' cellpadding='0' width='100%'>
 						<tr>
 							<th colspan='2' class='wpf-bright'>".__("Search", "vasthtml")."</th>
@@ -1926,6 +1930,7 @@
 							</td>
 						</tr>
 						</tr>
+							<input type='hidden' name='vasthtmlaction' value='search'>
 							<td colspan='2' align='center'><input type='submit' name='search_submit' value='".__("Start Search", "vasthtml")."'/></td>
 						</tr>";
 			
@@ -1933,13 +1938,13 @@
 		}
 		
 		else{
-			$search_string = $wpdb->escape($_POST['search_words']);
-			$option_topics_only = $_POST['topics_only'];
-			$option_show_as_post = $_POST['show_messages'];
-			$option_user = $_POST['search_user'];
-			$option_min_days = $_POST['search_min'];
-			$option_max_days = $_POST['search_max'];
-			$option_forums = $_POST['forum'];
+			$search_string = $wpdb->escape($_GET['search_words']);
+			$option_topics_only = $_GET['topics_only'];
+			$option_show_as_post = $_GET['show_messages'];
+			$option_user = $_GET['search_user'];
+			$option_min_days = $_GET['search_min'];
+			$option_max_days = $_GET['search_max'];
+			$option_forums = $_GET['forum'];
 			if(!$option_max_days)
 				 $option_max_days = 9999;
 			$op .= " AND $this->t_posts.`date` > SUBDATE(CURDATE(), INTERVAL $option_max_days DAY) ";
@@ -2118,4 +2123,4 @@
 	
 } // End class
 } // End
-?>
\ No newline at end of file
+?>
Only in forum-server.new/: .wpf.class.php.swp
diff -ur forum-server/wpf-post.php forum-server.new/wpf-post.php
--- forum-server/wpf-post.php	2009-09-05 04:52:49.000000000 -0400
+++ forum-server.new/wpf-post.php	2009-11-11 16:31:27.000000000 -0500
@@ -25,7 +25,7 @@
 			</tr>
 			<tr>	
 				<td>".__("Subject:", "vasthtml")."</tf>
-				<td><input type='text' name='add_post_subject' value='Re: ".$this->get_subject($thread)."'/></td>
+				<td><input type='text' name='add_post_subject' value='Re: ".htmlentities($this->get_subject($thread), ENT_QUOTES)."'/></td>
 			</tr>
 			<tr>	
 				<td valign='top'>".__("Message:", "vasthtml")."</td>
@@ -69,7 +69,7 @@
 			</tr>
 			<tr>	
 				<td>".__("Subject:", "vasthtml")."</tf>
-				<td><input type='text' name='edit_post_subject' value='".stripslashes($post->subject)."'/></td>
+				<td><input type='text' name='edit_post_subject' value='".htmlentities(stripslashes($post->subject), ENT_QUOTES)."'/></td>
 			</tr>
 			<tr>	
 				<td valign='top'>".__("Message:", "vasthtml")."</td>
