Umh, this article is dubious.<p>1. If your WAF can be fooled by adding a X-Forwarded-For header, trouble ahead.<p>2. If your security strategy is about mitigating attacks where the payload matches some regular expressions, trouble ahead. Machine learning? Double trouble ahead.<p>3. If you don't write only completely static queries[1] to then use as prepared statements or use a proper ORM[2] when using a SQL database, trouble ahead.<p>[1] <a href="https://www.akadia.com/services/dyn_modify_where_clause.html" rel="nofollow">https://www.akadia.com/services/dyn_modify_where_clause.html</a><p>[2] Like linq, jOOQ...