From today’s xkcd.com

Seriously, kids, make sure you properly handle inputs into your database, especially from web pages.