Rel 3 3 bug 10607 - SQL Box can change the database

I think here we should be more strict. Something like ```!~ m{\A\s*SELECT}smx``` maybe? With your code, just placing SELECT somewhere in the string would be enough. ;)
Please also see http://otrs.github.io/doc/manual/developer/3.4/en/html/code-style-guide.html#regular-expressions.