This looks like a generic class to me. Which if its the case a developer could create a form accepting input and feed it to the routine improperly.

seeing code like that raises a red flag with me that's all.

Thanks
Rodman