Security problem with the listing on page 131

The code listing at the very bottom of the page (using node_access()) lacks the necessary call to check_plain() for the node title passed to drupal_set_message().

Comments

This conflicts with the

This conflicts with the correct listing shown on page 92.