App reads user and last code and verifies with DB. DB connection still
prone to sql injection. Time not managed. Cant create new user.