Greg Grimes wrote: [...] >payload. You could even change the alert("XSS") to window.print() and it'll >bring up the browser's print dialogue. Here is the link: > >http://galleries.accent.bg/Cookbook/Cookbook?action=edit&'><script>alert("XSS")</script> what should happen then? I get either the password dialog or the edit window. Oliver