I might suggest checking your database to see if a URI has already been entered. If so, just return that link instead of whipping up a new one. Next, some sort of randomly-generated link ID might be good, as right now, I can just go back through every link that people have submitted by decrementing the ID number.

Also, you already know about validation. Cool tool.