You might want to add even the most basic input filtering