Register.php
-> login and mail_address fields are vulnerables to XSS attacks
Search.php
-> search_author,mode, start_year, end_year, date_type, are
vulnerables too.
Solutions : www.php.net/htmlentities
Regards,
Simon Bonnard
simon.itsecurity - at - gmail - dot - com