in reply to Use PPI to Find SQL Injection Attacks

and how about TaintIn in DBI? this should also find possible security holes.
DBI->connect($dsn, $user, $pass, { TaintIn => 1 });

In Section Cool Uses for Perl