Murassemblade:
I'll recommend you e-mailing Infopop about this and see what they say. I really doubt if your buddy can do it on Infopop's server (it isn't hacked whatsoever).
I'll bet it's more of a problem with a hack (with the most likely culprit being Codebuttons).
qasic
