Dating Site suffers from a login bypass vulnerability via SQL injection and also suffers from a cross site scripting flaw.