Yeah, I touched upon the parameterized query with the SQL injection part but should've mentioned that more specifically. Good point about the catch... I missed

Yeah, I touched upon the parameterized query with the SQL injection part but should've mentioned that more specifically. Good point about the catch... I missed it because I was shocked at everything else ;)