you can see what the douche is doing by the logs in his/her comments. Injecting html into the comments section. @btomkil/comments You guys can handle this by sanitizing the input. Search for sanitizing html and javascript on web forms.