Currently the code doesn't contain any protection against SQL injection. Some solutions need to be studied for this implementation.