Doesn't sound foolish to me. What you have described is a classic "invalid input" vulnerability. If you wanted to kill a database, the same is true. Find out what the format for field delimiter is, and use it in your input (in SQL you can add special characters to a query that can over-write the entire database! That is called an "injection") and write multiple records at one write.

Good advice to restrict your inputs, AND to check the length of your inputs, AND to validate that it is only reading/writing a single field.

my 2¢
Mark