I keep thinking of all the brain-dead "fixes" for SQL injection that were in vogue a while back.

Don't worry boss, I fixed it. Now I just need to figure out why our important client Mr. Update can't log in anymore.