It's probably worthless because any remotely competent hacker will escape commas or quotes or any other symbols that would mess with the file format. Same for SQL or shell commands. Your password is data, so if it gets parsed or executed then something is going catastrophically wrong with the system processing it.