Let me save you the trouble. If you run that code through a security analyzer (like VirusTotal or Plugin Check), you will find: