vb security questions...

[amity]

hey, i am having a few users do some java scripting work through their thread posting on the site.

i have disabled html within siglines, but they are still posting things like this:

<form>
<input type="button" value="This still works - click it" onClick="window.close()">
</form>
if this works, please don't actually click it as you will close the screen. if it does not work, how do i fix my boards so that it doesn't?

to prove that my site is not secure to hackers. any help with this? it is getting very upsetting to me- and now the other members are beginning to question the site security. how easy is it to hack in and become the admin as one of my members stated her husband could do?

one frustrated
amity