in reply to Curiosity and Security

If you intend to do any work with databases, you should also read up on protecting your code from SQL injection. Here's a starting place: Avoiding SQL Injection Attacks.