No bug? So anybody can send emails to users who allow to be contacted by email? That should be a "registered users only" feature I would say. Also the admin should have the option to disable this feature completely.

Well, good thing I could disable this "feature" by replacing the contact.inc.php by an empty file..

Anyway, thanks for your time.