diff --git a/first_time_login.module b/first_time_login.module
old mode 100644
new mode 100755
index 13506ac..90fa2fc
--- a/first_time_login.module
+++ b/first_time_login.module
@@ -88,20 +88,20 @@ function first_time_login_user_login(&$edit, $account) {
       $last_updated_date = format_date($updated_date, 'custom', 'd-M-Y');
       if ($needsupdate == FALSE) {
         $new_user_message = variable_get('first_time_login_new_user_message');
-        drupal_set_message(t($new_user_message, array(
+        drupal_set_message(check_plain(t($new_user_message, array(
             '@user' => $account->name,
             '@site_name' => variable_get('site_name'),
             '@created_date' => $account_created,
-          ))
+          )))
         );
       }
       elseif ($details->first_time_login == 0) {
         $update_user_message = variable_get('first_time_login_update_user_message');
-        drupal_set_message(t($update_user_message, array(
+        drupal_set_message(check_plain(t($update_user_message, array(
             '@user' => $account->name,
             '@site_name' => variable_get('site_name'),
             '@updated_date' => $last_updated_date,
-          ))
+          )))
         );
       }
     }