we should addslashes() anything not coming from index.php, eg message from database should be addslashes() first before feeding it to sendsmsd(), sms_subscribe