I still can't see how your example in the post #10 gets around the SQL injection risk.