why is this an Injection? How do you invert a hash?