Be very restrictive about what you allow in the db