Update to FluxBB 1.5.6.
Removed a couple of superfluous full stops from error messages. FluxBB's error function already adds a full stop to the end of the error message.
Use CSRF security tokens instead of checking the HTTP_REFERER to prevent CSRF attacks when submitting forms. Thanks to Visman for the suggestion.