It prevents a user visiting those sites from getting compromised. However, the spread if this is via SQL injection, so as long as those sites are insecure, it

It prevents a user visiting those sites from getting compromised. However, the spread if this is via SQL injection, so as long as those sites are insecure, it will keep going..