--- loncom/interface/lonchatfetch.pm	2003/06/23 21:30:42	1.11
+++ loncom/interface/lonchatfetch.pm	2004/06/27 17:14:28	1.13
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Chat Fetching
 #
-# $Id: lonchatfetch.pm,v 1.11 2003/06/23 21:30:42 albertel Exp $
+# $Id: lonchatfetch.pm,v 1.13 2004/06/27 17:14:28 www Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -29,7 +29,7 @@
 package Apache::lonchatfetch;
 
 use strict;
-use Apache::Constants qw(:common);
+use Apache::Constants qw(:common :http);
 use Apache::lontexconvert;
 use Apache::loncommon;
 use Apache::lonnet;
@@ -37,6 +37,12 @@ use Apache::lonnet;
 sub handler {
     my $r = shift;
 
+    if (! &Apache::lonnet::allowed('pch',$ENV{'request.course.id'}.
+             ($ENV{'request.course.sec'}?'/'.$ENV{'request.course.sec'}:''))
+        ) {
+        return HTTP_NOT_ACCEPTABLE;
+    }
+
     my $loaderror=&Apache::lonnet::overloaderror($r);
     if ($loaderror) { return $loaderror; }
     $loaderror=
@@ -118,7 +124,7 @@ sub handler {
 		$sender=&Apache::loncommon::screenname($snum,$sdom);
 		unless ($sender) { $sender="Anonymous"; }
 	    }
-	    $sender=~s/\'/\"/g;
+	    $sender=~s/\'/\&\#39\;/g;
 	    my $color=$sender;
 	    $color=~tr/a-j/0-9/;
 	    $color=~tr/A-J/0-9/;