Okay, I do not claim to be a php or mysql expert, but what stops somebody from using scripts to change character stats, querying passwords, or other such behaviours? I know there we those o us with som experience, albeit not much in my case, that will be testing these limitations.
What kind of security precautions are there going to be pretecting md?