XSS and SQL injection code added.