Defending against SQL injection – platform-level defenses