First version ok.

No security at all yet. SQL injection opportunities and no authentication