I did end up messing around with the code and got it to work, and now I understand how it is insecure. Thanks a lot for the help guys.