Only tested the first round but identifying SQL injections and XSS brings back memories. Fun project!