>That is a pretty far out security assessment Yeah, I kind of thought that too as I was typing it, but it's so egregiously bad that I couldn't get around that

>That is a pretty far out security assessment Yeah, I kind of thought that too as I was typing it, but it's so egregiously bad that I couldn't get around that conclusion. >You have the same exploits in commercial software Sure, virtually all software is susceptible to exploit. But, if someone were sending unsanitized strings to a database, and without using query parameters, etc., then we would all agree that's inexcusable after all of these years of knowing better. IMO, this is in that category.