What I would like to know is how to find out whether your site is vlalerubne to script injection in the first place.Am I right in assuming script injection vulnerability is increased significantly when you allow interactivity (visitors to comment, register, etc.)?And wo#7&ndu821l;t you be able to reduce this vulnerability with a captcha function?Next, are sites without interactivity still vlalerubne to script injection? How then?