Looks like you're vulnerable to SQL injection? I think someone could potentially spoof their user agent and own your database.