It could still be For example, one way to use SQL is to escape your parameters and then concat them straight into your SQL string. However, if someone leaves o

It could still be For example, one way to use SQL is to escape your parameters and then concat them straight into your SQL string. However, if someone leaves out an ‘escape’ somewhere, you have a major security incident The other way is to pass parameters separately as data to your SQL driver. It completely negates the problem If you’ve chosen the first way in your project already, you’ve committed to a major internal architectural problem. In the same vein, maybe if your code requires sprinkling ‘synchronized’ everywhere, you did it wrong But that said, we don’t know what actually is the problem since it’s just a marketing statement saying that high load was the cause and that doesn’t tell us anything