[gamer931215]

Quote:

Originally Posted by XFlawless but it can be easily XSS attacked(Some symbols not escaped)

It uses mysql_real_escape_string() in front of every input (except on the admin script, but yeah i guess you wont abuse mysql injections on your own website ?), so this shouldnt be possible if im correct,
and yeah about the passwords, il add an MD5 hash in a future version.