Prepared statements are widely supported by major DBMSs, including MySQL,[REF] Oracle,[REF] DB2,[REF] Microsoft SQL Server,[REF] and PostgreSQL [REF].
Many types of SQL injection attacks can be eliminated by disabling literals, effectively requiring the use of prepared statements; as of 2007 only H2 supports this feature [REF].