we need to add the sql injection stuff from my(Jacob) registration script.