XSS http://madriver.coursetour.ca/hole.php?hole=1%3Cscript%3Eale... Better filter your input.