Thanks, my problem came up together with SQL injections basically. Not that I've been hit by that but I noticed the possibility. Regarding XSS I think that I'm kinda safe, since I considered that while programming but a having a deeper look won't hurt. :)