$people = $query ->param ('people');
[download]

I would THINK about doing some taint checking here. Having validated data is the first step to writing a secure site....