If I install geeklog for public use, will there be a case where an user can submit a blog with malicious code to mess up my server

Geeklog filters out any HTML tags that aren't explicitly allowed and the default settings are pretty restrictive. It also includes filters for JavaScript and CSS tricks.

bye, Dirk