Pretty good for a beginer!!

yep, your are allowing any user visiting your form to edit and submit mails. This needs a work around, user may be allowed to communicate via, say, a questionire (using radio/check boxes..).

Security is indeed needed.

Ananda