Comment by stefs

this feels like blocking terms like "null" or "select" just because you failed to properly parameterize your SQL queries.