This style is quite prone to escaping/sanitization issues. I would have at least used a template engine instead of concatenating strings.