Quote Originally Posted by riteshjain1982
Not Sure but seems accidentally he also prevented sql injection.
If he is using In-Line SQL, then he is open to potential SQL Injection.