diff --git a/htdocs/sql/libraries/sanitizing.lib.php b/htdocs/sql/libraries/sanitizing.lib.php
new file mode 100755
--- /dev/null
+++ b/htdocs/sql/libraries/sanitizing.lib.php
@@ -0,0 +1,70 @@
+<?php
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ *
+ * @version $Id: sanitizing.lib.php 10298 2007-04-17 17:08:12Z lem9 $
+ */
+
+/**
+ * Sanitizes $message, taking into account our special codes
+ * for formatting
+ *
+ * @uses    preg_replace()
+ * @uses    strtr()
+ * @param   string   the message
+ *
+ * @return  string   the sanitized message
+ *
+ * @access  public
+ */
+function PMA_sanitize($message)
+{
+    $replace_pairs = array(
+        '<'         => '&lt;',
+        '>'         => '&gt;',
+        '[i]'       => '<em>',      // deprecated by em
+        '[/i]'      => '</em>',     // deprecated by em
+        '[em]'      => '<em>',
+        '[/em]'     => '</em>',
+        '[b]'       => '<strong>',  // deprecated by strong
+        '[/b]'      => '</strong>', // deprecated by strong
+        '[strong]'  => '<strong>',
+        '[/strong]' => '</strong>',
+        '[tt]'      => '<code>',    // deprecated by CODE or KBD
+        '[/tt]'     => '</code>',   // deprecated by CODE or KBD
+        '[code]'    => '<code>',
+        '[/code]'   => '</code>',
+        '[kbd]'     => '<kbd>',
+        '[/kbd]'    => '</kbd>',
+        '[br]'      => '<br />',
+        '[/a]'      => '</a>',
+        '[sup]'      => '<sup>',
+        '[/sup]'      => '</sup>',
+    );
+    $message = strtr($message, $replace_pairs);
+
+    $pattern = '/\[a@([^"@]*)@([^]"]*)\]/';
+
+    if (preg_match_all($pattern, $message, $founds, PREG_SET_ORDER)) {
+        $valid_links = array(
+            'http',  // default http:// links (and https://)
+            './Do',  // ./Documentation
+        );
+
+        foreach ($founds as $found) {
+            // only http... and ./Do... allowed
+            if (! in_array(substr($found[1], 0, 4), $valid_links)) {
+                return $message;
+            }
+            // a-z and _ allowed in target
+            if (! empty($found[2]) && preg_match('/[^a-z_]+/i', $found[2])) {
+                return $message;
+            }
+        }
+
+        $message = preg_replace($pattern, '<a href="\1" target="\2">', $message);
+    }
+
+    return $message;
+}
+?>