On Avoiding Common Sql Pitfalls