glad that its built using jQuery.

Hi!

You don’t check the length of $_POST['name'].
An attacker can inject into the session any type of large content. (the size depends on post_max_size constant in php.ini)

So the attacker can take down your site with a nice dos:

while (true) {
start_a_new_session (eg. delete cookies)
post_a_large_content
}

Behalf the line

$_SESSION['name'] = stripslashes(htmlspecialchars($_POST['name']));

write eg.

if (strlen($_POST['name']) < 100) {
$_SESSION['name'] = stripslashes( htmlspecialchars( $_POST['name']));
}else{
die(’bad luck’);
}

or something similar.

Freakin awesome. thanks.