Comment by koakuma-chan

> It's gotten a little better, partly because of greater usr of ORMs.

No, just use prepared statements.