I miss doing drive-by SQL injection attacks against my classmate's string concatenations with bonus no input validation queries