This is not advertising.. I am just checking Image Addition..

isnt accepting HTML directly ....dangerous?????
Can we include javascript too??
NO javascript!
good..
are we processing tags? or taking into database directly?
is mysql injection taken care of??? " '
well...css?
hmm!
:( no css! but actually its good..script and style tag contents are getting saved.