Ok, let's say that this is 0.5 SQLi vulnerabilities in here. We're not currently committing the complementary half, so I'll pull it in. But since exploits typically chain together a series of misdemeanors such as this one, it's worth fixing at some point.