Yep it would only work if you didn't sanitize a user input string in this case 'nice'

They could write ''; drop table blah;