Correct, but that doesn't make the statement of the causes for SQLi any different.