On: PHP Interpreter Detects SQL Injection and XSS Vulnerabilities

Avoiding SQL injections is so easy that I don't understand why this topic still lives on.

there's a real disconnect between the academic literature and tradebooks on using web application frameworks.

I fell into writing about it this way:

me: I want to write about securing databases from attack via the web front end

prof: go find me the most common vulnerability

me: that's sql injection

prof: that's your topic