Detect SQL injection issues introduced via concatenation