need to do some bounds checking here since query is 256 bytes long and tmpfile contains user input (vm name)