There is not mitigation to SQL Injection attack in the patent - didn't read it all word by wors but skimmed it through.