This was my thought as well, sanitize your inputs! Are they not quoting/casting to string before input?
This was my thought as well, sanitize your inputs! Are they not quoting/casting to string before input?