diff --git a/4chan_x.user.js b/4chan_x.user.js
index c133f236c..451c587d4 100644
--- a/4chan_x.user.js
+++ b/4chan_x.user.js
@@ -1364,7 +1364,7 @@
       }
     },
     dialog: function(text) {
-      var l, qr, ta;
+      var c, l, m, qr, ta;
       if (text == null) {
         text = '';
       }
@@ -1372,6 +1372,10 @@
         top: '0',
         left: '0'
       }, "    <a class=close title=close>X</a><input type=checkbox id=autohide title=autohide>    <div class=move><input placeholder=Name name=name form=qr_form>Quick Reply</div>    <form enctype=multipart/form-data method=post action=http://sys.4chan.org/" + g.BOARD + "/post target=iframe id=qr_form>      <input type=hidden name=resto value=" + g.THREAD_ID + ">      <input type=hidden name=mode value=regist>      <input type=hidden name=recaptcha_challenge_field id=challenge>      <input type=hidden name=recaptcha_response_field id=response>      <div><input placeholder=Email name=email>" + QR.spoiler + "</div>      <div><input placeholder=Subject name=sub><button>Submit</button><label>auto<input id=auto type=checkbox></label></div>      <div><textarea placeholder=Comment name=com>" + text + "</textarea></div>      <div><img src=http://www.google.com/recaptcha/api/image?c=" + QR.captcha.challenge + "></div>      <div><input placeholder=Verification autocomplete=off id=recaptcha_response_field><span id=cl>" + ($.get('captchas', []).length) + " captchas</span></div>      <div><input name=upfile type=file accept=" + QR.accept + "></div>    </form>    <div id=files></div>    <div><input placeholder=Password name=pwd type=password><a id=attach>attach another file</a></div>    <a class=error></a>    ");
+      c = d.cookie;
+      $('[name=name]', el).value = (m = c.match(/4chan_name=([^;]+)/)) ? decodeURIComponent(m[1]) : '';
+      $('[name=email]', el).value = (m = c.match(/4chan_email=([^;]+)/)) ? decodeURIComponent(m[1]) : '';
+      $('[name=pwd]', el).value = (m = c.match(/4chan_pass=([^;]+)/)) ? decodeURIComponent(m[1]) : $('input[name=pwd]').value;
       if (conf['Cooldown']) {
         QR.cooldown;
       }
diff --git a/script.coffee b/script.coffee
index d175babc1..e941d52b7 100644
--- a/script.coffee
+++ b/script.coffee
@@ -1077,6 +1077,11 @@ QR =
     <div><input placeholder=Password name=pwd type=password><a id=attach>attach another file</a></div>
     <a class=error></a>
     "
+    #XXX use dom methods to set values instead of injecting raw user input into your html -_-;
+    c = d.cookie
+    $('[name=name]', el).value  = if m = c.match(/4chan_name=([^;]+)/)  then decodeURIComponent m[1] else ''
+    $('[name=email]', el).value = if m = c.match(/4chan_email=([^;]+)/) then decodeURIComponent m[1] else ''
+    $('[name=pwd]', el).value   = if m = c.match(/4chan_pass=([^;]+)/)  then decodeURIComponent m[1] else $('input[name=pwd]').value
     QR.cooldown if conf['Cooldown']
     $.bind $('.close', qr), 'click', QR.close
     $.bind $('form', qr), 'submit', QR.submit