[sqeaky]

Presuming your internet based users will enter malicious input is not paranoia, it is the only sane starting place.