Nice XSS try on the 3rd image.

Bad thing is that every facebook user has email id `fbusername@facebook.com`. So you can easily get into any team you want.