Writing secure code does not guard against self-inflicted security holes when working with unmanaged resources such as databases.

• 编写安全代码不会阻止在使用非托管资源(如数据库)时自己造成的安全漏洞。