I pushed recently various sql improvements into the develop branch: https://codeberg.org/Kbin/kbin-core/commits/branch/develop

I advise all /kbin server owners to update their instance again!

I went through all the source code, fixing all possible sql injections once and for all. I have no idea how this all ended up in the code in the first place to be honest.
New code needs to be peer reviewed thus verified by another person, unit tested and follow our coding style guide as well.