edit.php is working, but has zero security or validation