Well, if they are on than someone with too much time on his hands could hack your site easily. He could inject variables into your script without any problems.