FOR EVERYONE THINKING OF USING THIS:

This plugin is NOT dangerous. Its how someone uses it.
If you need a MySQL Connection with a plugin do it on the server. Also do it localy...if the MySQL is in a local area connection with the server!
All clients must use only client applications , in the server code for all plugins you must give username and password. This will be visible if you give it to the clients.
Using a PHP Script to do this work (as I'm using right now) requires first a WEB Server and second needs more time to process. But gives the opportunity to sanitize the input (remove bad/exploit characters from the strings).

Never use usernames/passwords for a sql server in client applications, it can be captured with software as it is making its way out of your lan card. And make sure you remove any '-"; characters from your input strings before sending them.