It's now become quite obvious that the current messages.php has more holes than I can fix. Therefore I am scrapping the entire script with a complete rewrite under way. For your site's protection I recommend that you remove messages.php from your server as hacking groups are targeting this scripts hole to hijack admin accounts. I am working as fast as possible and should have a newly coded messages.php script ready within 48 hours. The messages.php will work in all v6 installations. I apologise for any inconvenience caused by this issue.
