Comment by sQL_inject

And look how it has worked out for them.