You might want to fix this in case you ever decide to add a way to log on:

http://scrib.in/m27dy7

(I added the text </textarea><img src=g onerror="alert(1)"> and went to view it.)