There's just no good way to tell what team is legit and what team is an attempt at an XSS or whatever tomfoolery contestants might be up to. CGI might work for high school kids, but for that a shell script would probably work.
