Need to parse SQL

[badgerowluke]

In order to start to secure the RDBMS interactions, the very least that has to happen is that the queries need to be parameterized. I believe that in order to do that the query/operation/transaction needs to be parsed to decide what goes where.