Simple GuestBook

[nevets04]

Nice script !

But, be careful !
When you display the messages, don't forget htmlentities !
You will be victim of XSS if you don't use that.

PS : You can concatenate string and variables like this, if you want :

PHP Code:

fwrite($file, $name . ": " . $message . "<br><br>"); 


Thanks, I was looking for ways to fix xss exploits