You need to look into some serious security stuff on the site. You have directory listings, so I can see all your php files and start fuzzing them. I managed to

You need to look into some serious security stuff on the site. You have directory listings, so I can see all your php files and start fuzzing them. I managed to get some mysql error to dump on input which then showed a little idea of how your were processing. There is no input validation and scripts process and render (your dan page is broke) causing anything else to stop functioning. Also, I tried to register using the link that says register and it goes to a 404 that tells me to stop hacking the site (made me laugh only because the lack of input validation), so you may want to change that to something a little more friendly. You may want to consider the following: - Lock down your dirs - Sanitize input and strip out all tags - Setup an approval queue for anonymous user postings.