This one was especially funny for me since I was just part of a company that wrote student information systems -- the software that is used to track student records in K-12 schools. Fortunately, we were using prepared statements :)