A SQL injection fix diff review: a diff replacing string-concatenated queries with parameterized statements, with a severity control, a checklist for other injection sinks, line comments and a copyable verdict.

by dev:local