[quickthrower2]

SQL injection is due to sloppy programming practices and easily avoided. Using something called query parameters.

This is another beast!