Someone got owned: var minhighscore = STOP REMOVING ME AND I WILL HELP YOU FIX IT!; var hsl = { "scores": "STOP REMOVING ME AND I

Someone got owned: var minhighscore = STOP REMOVING ME AND I WILL HELP YOU FIX IT!; var hsl = { "scores": "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "STOP REMOVING ME AND I WILL HELP YOU FIX IT!", "99999999999999999999999999999999999999999999999999", "60000", "60000" ], "names": [false, false, false, false, false, false, false, false, false, false, false, false, false], "times": [1426140797, 1426140808, 1426140809, 1426140810, 1426140811, 1426140812, 1426140813, 1426140814, 1426140817, 1426140817, 1426140744, 1426140770, 1426140788] }; I looked through the code, and it looks like there is ZERO back-end validation for this request: jQuery.ajax({ url: "submiths.php", data: { highscore: '99999999999999', highscorename: 'someone', hsl: 'foo', stime: 'bar' }, success: function(data) { jQuery("#answerkey").html(data); } });