Better SQL parameterization.