Don't call a SQL (database) man. It's the input that is wrong ;-)