Bad news! Your site is vulnerable to XSS https://ocalog.com/post/15/

See "OWASP top 10" for getting started with web security.