bradymiller/openemr — comment on commit f9dc3687ea95ad70b4feb4eabaf0c7826d9a11ff
File: interface/main/calendar/dated_reminders.php line 31
By bradymiller:

The above flags should be removed, since the parent script will do this. Note this is a technical reason why I would recommend not placing this script within the calendar script. This is because the calendar script does not use the security model yet, so dealing with magic quotes normalization and escaping issues will be much tougher. The Messages module has already been converted to the new security model, which is a technical reason why it would be easier to include this code there in a secure fashion.

link to security model
http://www.open-emr.org/wiki/index.php/Codebase_Security#Plan