Review our Open Source Developer Network (bettercodes.org)

XSS holes everywhere.

Any comment or feedback?

The first thing I thought was "great, something else I have to create a new username and password for". Supporting OpenID, OAuth, or some other kind of federated login would be a major improvemnt, IMHO.