Your question makes no sense.
1. We already have server side validation on the login and registration pages and other places where it is needed.
2. We already use parameterized queries, we never concatenate user input into sql statements, nowhere in mojoPortal are we vulnerable to sql injection.
Of course in your own custom features you must implement your own validation and secure development practices.