Well, exactly that, it's not attack on a database, because SQL does provide way to pass inputs correctly, just on the code that connects to database and allows

Well, exactly that, it's not attack on a database, because SQL does provide way to pass inputs correctly, just on the code that connects to database and allows that. I.e. the fault is at amateurish code before the SQL/GPT, not the "database" itself