Forum Moderators: coopster
It is difficult to be more specific with out knowing exactly the scenario in which 'whatever' will be executed.
If this is a public feature then you will need to watch for sql injection so that you don't inadvertantly give unknown malicious users access to your db.
for the login : [devarticles.com...]
That should be enough.