Hi ya Simon,
I just used the %s which comes with the default message on the language constants. I also tried changing that to the hardcoded value within quotes, and for some reason anything within the quotes gets concatenated to
http://4totsandmum.com/tandm/ which I think comes from the configuration file. Could this be a browser based issue. At the moment I have just removed the quotes and just put them (not sure if it is not a standard) without quotes and it works fine.
Also, I do have to thank you as I had followed your article on the security issues and havent been hacked ever since. In the past year, got hacked so badly, I was completely out of my wits. thanks very much.