==============================================
FORUM UNOFFICIAL SEQRITY FIX 1.0
For Koobi 5.4 Pro 
Written by Nulled.
[http://www.cathedral.net.ua]
==============================================
   KOOBI
     koobi   5.4
   .
 
  : 
$_POST["topic"] 
$_POST["subject"]

         : ><'" 
 
: 

  /system/addpost.php
$title = ( $_POST["subject"] == "" ) ? '' : addslashes($_POST["subject"]);
 :
$title = ( $_POST["subject"] == "" ) ? '' : htmlspecialchars($_POST["subject"], ENT_QUOTES);


  /system/addtopic.php
$title = ( $_POST["subject"] == "" ) ? "" : $_POST["subject"];
 :
$title = ( $_POST["subject"] == "" ) ? "" : htmlspecialchars($_POST["subject"], ENT_QUOTES);

$topic = addslashes($_POST["topic"]);
 :
$topic = htmlspecialchars($_POST["topic"], ENT_QUOTES);

    ( &lt; &gt;  . ...)  

  /templates/***temlate***/forums/showtopic.tpl
<strong>{$topic->title|escape:'html'|sslash}</strong></td>
 :
<strong>{$topic->title|sslash}</strong></td>

  /templates/***template***/forums/lastthreads.tpl
<img src="{$img_folder}/rel.gif" alt="" class="absmiddle" /> {$lt.time} <a title="{$lt.title|escape:'html'|sslash}" href="index.php?p=showtopic&amp;toid={$lt.tid}&amp;area={$area}">{$lt.title|escape:'html'|sslash|truncate:28}</a>
 :
<img src="{$img_folder}/rel.gif" alt="" class="absmiddle" /> {$lt.time} <a title="{$lt.title|sslash}" href="index.php?p=showtopic&amp;toid={$lt.tid}&amp;area={$area}">{$lt.title|sslash|truncate:28}</a>

  /templates/***template***/forums/topicform.tpl
<input class="inputfield" type="text" name="topic" value="{$topic|escape:'html'|sslash}" maxlength="200" size="50" />
 :
<input class="inputfield" type="text" name="topic" value="{$topic|sslash}" maxlength="200" size="50" />

    .

Enjoy!
Nulled.