1) The Url isn't exactly memorable. 2) I am able to traverse your directories eg http://itripd.com/js/ http://itripd.com/js/ I don't know about apache so was

1) The Url isn't exactly memorable. 2) I am able to traverse your directories eg http://itripd.com/js/ http://itripd.com/js/ I don't know about apache so was unable to find a web config kinda file 3) I tried some sql injection and got this response "The URI you submitted has disallowed characters." I assume you are doing this manually rather than using sql parameters? 4) Inline CSS...yuck 5) Links like this http://itripd.com/trip/4 http://itripd.com/trip/4 arn't very friendly.