Online competitions security problem?

[Wood]

I entered the From Hell competition twice. I didn't mean to. I forgot I entered it.

I thought it seemed familiar, so I checked out the other competitions which I know I've entered (yes, all of them as a matter of course), and the site's got the entry form blank there for me.

This shouldn't be, should it?

[Oddboy]

I did that too!
I'm sure they used to say when you've already entered the comp.

[Wake]

It only says you've already entered if you've 'just' entered.

However, if you enter twice the new answer replaces the old one.

Wake

[Art]

Hi. I've noticed another security issue. It appears you can enter arbitarty HTML into the chat room, which includes

[Oddboy]

Dude - you've seriously shagged this thread up.

I don't think you're fully cured from the scojoitus you had last week.

[Art]

Yeah, sorry about that. I've mailed Wake and I think PHP provides an easy way to stop it ever happening again, which i've also mailed him.