Contact us form not validated. Anyone can send empty massages. http://tdatours.com/contact.php?PHP_SELF Add some captha and XSS filter Thanks , ill fix it