The memory fields in the participant's profile should be turned into freehand text.
The memory amount should be checked to be a decimal number before being inserted into the database
The memory type should be sanitized to prevent script/sql injection before being inserted into the database.