escape html for capcodes

mod.php

@@ -661,7 +661,7 @@
 					} else {
 						$po = new Post($post['id'], $post['thread'], $post['subject'], $post['email'], $post['name'], $post['trip'], $post['body'], $post['time'], $post['thumb'], $post['thumbwidth'], $post['thumbheight'], $post['file'], $post['filewidth'], $post['fileheight'], $post['filesize'], $post['filename'], $post['ip'], $mod ? '?/' : $config['root'], $mod);
 					}
-					$temp .= $po->build();
+					$temp .= $po->build() . '<hr/>';
 				}
 				
 				if(!empty($temp))

post.php

@@ -128,6 +128,9 @@
 		if(!openBoard($post['board']))
 			error($config['error']['noboard']);
 		
+		if(checkSpam())
+			error($config['error']['spam']);
+		
 		if($config['robot_enable'] && $config['robot_mute']) {
 			checkMute();
 		}
@@ -188,7 +191,7 @@
 		
 		if($mod && $mod['type'] >= MOD && preg_match('/^((.+) )?## (.+)$/', $post['name'], $match)) {
 			if(($mod['type'] == MOD && $match[3] == 'Mod') || $mod['type'] >= ADMIN) {
-				$post['mod_tag'] = $match[3];
+				$post['mod_tag'] = utf8tohtml($match[3]);
 				$post['name'] = !empty($match[2])?$match[2]:$config['anonymous'];
 			}
 		} else {