mind if I try to exploit it, help you work with your PHP security skills
edit: well, i'm not expert at SQL injections, but from what i've been trying, you seem pretty safe..
nice job trev