Web developer security course claims that customized error messages prevents SQL-i. #facepalm #thisiswhywesuck