hello all, i just want to say MDNews is to ahckers-friendly, after 2 minutes i found 2 problems:

1) XSS (etc: <script>alert(1);</script>)
2) No admin login. People can just go to admin.php and add stuff, like the XSS etc.

I just wanted to let you people know