Defending against SQL injection – code-level defenses