title: SQL injections with prepared statements?
body: <p>If I remember correctly, I think Jeff has mentioned in the Stack Overflow podcast a possible weakness in SQL prepared statements. I'm wondering what kind(s) of weakness(es) did he refer to? Was it possibly just about <a href="http://www.owasp.org/index.php/Preventing_SQL_Injection_in_Java#Prepared_Statements" rel="noreferrer">inappropriate usage</a> thereof, or something more sinister?</p>
  
  <p>The podcast, to my remembering, didn't go deeper into the subject, it was just a pass-by-remark.</p>