note 96695 deleted from security.database.sql-injection by cmb

Note Submitter: wang dot liang dot com at gmail dot com ---- another way to stop sql injection when you odbc_*: create two users, one has only select permission, the other has only delete, update, and insert permission, so you can use select-only user to call odbc_exec while you don't have to check the sql injection; and you use d/u/i only user to update database by calling odbc_prepare and odbc_execute.