hmmm... how about injection and spoofing?
encription does not matter then....?