Intiruged, and that code would be?
SQL injections. Please correct me if I am wrong, if you are connecting with a user who has limited permisions - how much devistation can these cause?
There is so many variables (client side validation) and back end hurdles to get over (user level, table level permissions) etc - is it worth out tme worrying ababout it??
Wind is your friend