NEVER trust user input
I've had the joys recently of being part of a code audit for a potential client
for a change or re-build of a system. The code in itself was complete
textbook...of how not to code a system. It looked like it had been built long
long ago