Sure, but I'm fairly certain that SQL injection is covered here.
how many people have access? mods, etc.?