But every once in a while I do get a "message" from a friend that is a request to approve something they wanted to post on my main page. It is always SPAM of some kind.
So here's my question, how are people getting my friends to send me SPAM to post on my page without having their passwords? Is there some software now that can get into their account without their password? I'm wondering if it's been done to mine as well.