Thank you all guys for your feedbacks.

I upgraded to PHP-Nuke 5.6 yesterday, and fixed the security hole in private messages.

Now I don’t have to worry about script kiddies