well, so long as a student's name isn't "Robert'); drop table students;"...