This is a big security hole; admins would be able to post any OS command and have it run within the server process by simply adding a semicolon.

The date_time should be converted to a date first, to guarantee that the above is running as expected.