Reminds me of the old days of concatenating strings (including unsafe user input) in php to generate queries.