M/process tests

sql injection? =(