lol, yeah, he updated the code to filter out <script> tags and his RegEx is wrong and now won't allow any messages to come through.
yeah, I rather stupidly didn't think to add any XSS protection initially because this was a simple tech demo. And yes, I managed to balls up the regex for a while.