Change bookmarks.php from

@list($url, $user, $cat) = isset($_SERVER['PATH_INFO']) ? explode('/', $_SERVER['PATH_INFO']) : NULL;

to

@list($url, $user, $cat) = isset($_SERVER['PATH_INFO']) ? explode('/', strip_tags($_SERVER['PATH_INFO'])) : NULL;



Change functions.inc.php from
return $_GET['sort'];

to

return htmlentities(strip_tags($_GET['sort']));

Encryption / Decryption Key