Are people still using the old school way to write SQL queries for their App?

I thought SQL injection got vanished like a polio a decade ago!