No SQL injections on MY badge!