On: SQL injections vulnerabilities in Stack Overflow PHP questions

[laurent123456]

Yes, that's a false positive. I guess the results could be tweaked to filter out lines that include `->prepare(...`.