[bottlepalm]

I could take this php example or raw sql code and put it in the body of an API call from the client.

Are API calls bad now? Same thing. A misunderstood example.