it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example <script>alert("Hello DragoN");</script> WBNews http://www.webmobo.com/ DragoN DragonJAR@xxxxxxxxx