Hello,
I was looking for a more complex solution to this problem, however. I have found out that by inserting simple javascript validation, the injections have halted. And I mean stopped right away! My validation requires numerals for zip code and phone numbers. I hope it continues to work.