replaced strip_tags() by htmlspecialchars() in most of POST variables

added stripslashes() to POST variables while form is not sent

inc/views/MainView.class.php

@@ -265,7 +265,7 @@ class MainView extends View
 		
 		$this->assign('post', $_POST['post']);
 		if (isset($_POST['preview']))
-			$this->assign('preview', addslashes(htmlspecialchars($_POST['post'])));
+			$this->assign('preview', true);
 		
 		if ($type == POSTING_NEWTOPIC || $type == POSTING_EDITTOPIC)
 			$this->assign('topic', $_POST['topic']);