These forms are open to injection. Not sanitized at all. Even for a prototype this is not good practice.