• Just remember that if there's human input, there's a threat. It doesn't matter if it comes from outside or inside of the company. Protect yourself against any way that a user can input a direct string.

    Luis C.
    General Disclaimer:
    Are you seriously taking the advice and code from someone from the internet without testing it? Do you at least understand it? Or can it easily kill your server?

    How to post data/code on a forum to get the best help: Option 1 / Option 2