...why is there a bio when a message is being sent? That's a weird feature. o.O
It's probably pulling it up elsewhere and will need the stripslashes wherever that's going on, too...
It's in
class_privatemessage.php, function getPostBar, around line 77. Change
PHP Code:
$postHeader->add(new TCell("<b>Member Since: </b><br>{$sender->membersince}<br> <b>Bio:</b><br>{$sender->profile->getBio()}<br> "));
to
PHP Code:
$str_bio = stripslashes($sender->profile->getBio());
$postHeader->add(new TCell("<b>Member Since: </b><br>{$sender->membersince}<br> <b>Bio:</b><br>{$str_bio}<br> "));
As for the friending yourself thing... perhaps we can make a check so that if you are the user that the page belongs to, to not display the trade, message, or friend options. In
class_userprofile.php, near the bottom of the page near the bottom of the contactinfo function, you can surround stuff with
PHP Code:
if (!$mysidia->user == $mysidia->input->get("user")){ ... }
which reads 'if not the user whose page this is, you can display this' implying that that if you are the user whose page this is, the stuff inside it will therefore not display.