Please don't use blacklists, use parameterized queries or stored procs instead | Hacker News Reader