[yuhong]

As I said, it would probably protect against a simple SQL injection, but if the attacker can get root it won't help. Better than nothing, but...