It's crazy to me SQL injection is still a problem