Can this be validated/sanitized at all? Like should feeds always be just alphanumeric characters, any sort of max length, etc.? Taking a query variable and then either outputting it in json or using it to look up something in the database, or storing it directly into the database makes me kind of nervous overall.