diff --git a/bbs/alert.php b/bbs/alert.php
index 2667154be..cfa38c366 100644
--- a/bbs/alert.php
+++ b/bbs/alert.php
@@ -40,7 +40,7 @@ if($error) {
 ?>
 
 <script>
-alert("<? echo $msg; ?>");
+alert("<? echo strip_tags($msg); ?>");
 //document.location.href = "<? echo $url; ?>";
 document.location.replace("<? echo $url; ?>");
 </script>