Fix XSS bug

To test use the following on browse.php. I used Firefox to test without any anti script software.

browse.php?id=1&PAGE=3'%22()%26%25<ScRiPt%20>prompt(984815)</ScRiPt>