heh, I'm surprised this works since it looks like a header injection attack.