Restrict or Protect Oracle Forms Developer from SQL Injection

For Developer6i:
FORMS60_RESTRICT_ENTER_QUERY=true/false

For Developer9i/10g:
Open Default.env file from the foollowing path
\forms90\server\default.env
and write FORMS90_RESTRICT_ENTER_QUERY=true/false
Must restart from service/oc4j.