Why does the contact staff page have a membername and email address?

Surely if you are signed in it should just take your username. This could lead to people pretending to be other users etc.

Could we just have a simple Contact Staff form where you just add message without ability to change username etc.

Okay about the Contact Page if you are logged in it automatically pulls out the user's name and email so you don't have to fill it but if you are not logged in or not a registered user, you are considered as a guest so if you go to the Contact Page it'll use "Guest" (You can even change it to something else) as your Name and a empty field for the email where you can type your input.

The contact form sends "sender, message and IP Address".

Yes I know what it sends and know it automatically adds username/email address. My point is that the user can CHANGE the username AND email address to anything they like so could potentially impersonate somebody else and abuse it. These fields should not be editable.

in basket ball you got 3 points shot