Yes and when I asked the chat developer via email if the new version addressed XSS exploits he immediately replied and said 'it addressed all known issues.'
When I told him I was hacked because of it and said no hard feelings, any advise for me, he no longer replied. So bye bye chat.
By the way Chuck, this whole experience has had me wise up about security. I want to back up my whole site better. One thing I am stuck on is the data folder for photos, reviews, etc... I keep my images there and out of the database - I think it's that folder right? Well anyway, you are probably better at unix than I, what is the best way to zip the photos up so I can download them?