One bank's approach to avoiding SQL Injection...