Issue: There's no check for illegal characters or input length for usernames, categories, messages, etc. Fix: Add validation checks (e.g., max character limits, restricted characters).