It's not difficult to avoid, is it? Sanitize input and use parameterized statements. I'd take longer to not do those things, personally.