Messenging system profile script

[Appzmaster]

I just finished getting a system working that shows all the users of a messenger system I have and turns all the names into links which once clicked show the users profile. The profile page is shotty as I am not to experienced in XML and the data stored in the MySQL table appears to be xml so i am not sure how to display that info right yet but for the most part it does what it is suppose to. I just want to throw out the link for people to test it to see if they can find possible exploits or bugs feel free to play with it. Here is the link: http://officialmc.com/messenger/ I thank you in advance for any help.