The fact it's working in a test run doesn't indicate it's a proper method (It works as long as you don't change the target in these 5 seconds, nothing one may expect in a real chat situation). Likewise some insecure code: the fact it didn't exploit you in a test run won't make it secure.