Hello


First you must know than english isn't my natural language, but i will try to speak in most properly language.

I don't know if i address to good person and if you are responsable of security in this website but i jus't send this PM for advert about a Potencial security Problems on a part of Website.

This Problem was located on UT3 Global Stats page (http://ut3stats.dfbgaming.com).
This page was exposed to workable passive XSS vunerability in &quot;plname&quot; variable .
It allow a malicious person to execute javascript code on body of webpage.
With forged link the possibility of redirect some registred members to another malicous website and steal personal data like : Cookies and ip.
in 2nd Time it's can allow to send some automatic Requests like : Private message,Post in Forum &amp; Shout box, Edit a profile.

I tip you to fix this security fail for prevent a futur malicious actions.

You can add htmlentities() Security at current php code for disallow special char like &quot;&lt; &gt; ; /&quot;
And for total security fix : Asking a new time the login ID to a person who login in his accound with another ip than his last connection for prevent a session stealing by cookie.

Hoping to have helped.

sincerely , Erenox