Yeah. This is a definite problem when working with user generated databases (eg untrusted), that could have pretty much anything in them. :/