Found this interesting link:

http://www.unixwiz.net/techtips/sql-injection.html

Interesting indeed!

This is a strong argument in favour of using static SQL in apps, instead of dynamic SQL.
This way, the query is already analysed and interpreted at compile time, and the runtime provided arguments are just plugged into the placeholders as text, without interpretation. Exactly as one would expect.

Yes I just read it before getting here and wrote about it in dutch at beterewebsites****

Where can I find your contribution (URL)?

@ betere websites dot nl

Cool! It was as interesting as new Indiana Jones' adventure