Thanks. The link is a good answer. I'm gathering, then that the concern is just that the need for sanitizing the input code was not dealt with in the OP?