Relying on unlikelihoods is a dangerous programming practice, especially when you have a concern for security. You'd be much better off escaping the string or validating the input to guarantee your delimiter can't be found within your data. However, this can be a significant pain, so a good compromise is to use a multi-character delimiter instead of a single character, say '|||'. This is a minimal change which does a lot more to protect your data.