I once messed with someone on a board that gained access to something on one of my boards. IF you allow HTML in post's nothing you do is going to help you as he may have installed a HIDDEN javascript that sends him the login name and password for everyone that reads that post.
Just a thought, took the dude a year to find it on his board, LOL.
But I'm also not suggesting ever doing this and if you did you would really need to know your stuff to pull this off and need a web server of your own to retrieve the data without being noticed as well.
