Make sure he uses software that is updated and http://www.nullcube.com/software/cub.../subs/xss.html