lamefun2: but also it's a bad idea to ever use unverified user input.