Reply To: Chat room not working

[chrisburton]

I can also add people to my friends page that don’t exist. Point: check if people exist, don’t allow people to add things to the page.

It appears you are filtering XSS attacks for your form so that’s good. Although your URL parameters would make me nervous.