There are no tests for sql injections!!

More...