Why! Do you use your eyeballs to spot SQL injection? Or do you maybe use a tool? A linter perhaps?