same sql scrub question here, or are oracle stored procs protected from someone doing ``"; drop table foo;"``?