You can get to the tables via sql injection just as well as you can drop a table.