Navigator: prevent potential SQL-injection attacks.

In short, no variables from the client should ever go directly into
an SQL query string.