rshoe: Further to Athanasius's reply: It is, in general, a very good idea to be suspicious of and to 'sanitize' (i.e., check, test, validate) input to your program even when the entity generating that input is you.