Services like Cloudflare or AWS WAF can automatically block SQL injection patterns before they reach your backend.
If your game stores passwords (you should never do this) or Roblox cookies in the database, an attacker can use: sql injection roblox