Hi,
In RC2, when a user go to another profile and click subscribe, if try a simple sql injection site not show error... try with this string: ' or '0=0--' in name field.... it don't print any errors...simply do nothing... it's a bug or it's normal?
Thank