Fixing injection bugs properly http://t.co/8BNoyxuALi (longer blog post, worth your time)