Apologies, I meant string literals.<p>There&#x27;s no technical reason the language couldn&#x27;t make it so that string literals can be identified at runtime.<p>There are several good ways to put a stop to SQL injection. Better education is one, better APIs is another. There is no reason to just give up on the idea of using SQL queries directly because of injection attacks.