Modified to allow SQL injection attacks.