Comment: Re:It's the code, stupid! (Score 1) 108
Lots of people fail at preventing SQL Injection. Lots of people who really ought to know better: http://web.nvd.nist.gov/view/vuln/search-results?query=SQL+Injection&search_type=all&cves=on
This isn't magic, and it's no replacement for a good secure software development program, but it's a fair bit better than nothing.