Closed security hole: passing userinput to globals() considered dangerous