Do not concatenate user input before you validate it.

• 验证前请勿连接用户输入。