I’m Not Attacking You. I Promise! May 19, 2010 • Richard Banks It’s nice to know that you’re sanitising your user input but I’m pretty sure that my bog standard email address isn’t a SQL Injection attack.