There is a very good chance I did not understand the exploit. Tried to do SQL injection with the name entry...