True. I added check to see if the string is length 6.  I think that should be sufficient.  It may be hubris, but how much damage can they do with 6 characters...