Shoutbox

there's a bug that let  a user upload an attachment with a dodgy name that can make  that the pages looks weird. As an example, see the name of the attached file, and now think about what would have happened if the name had something like <script> ...