https://serverspace.io/support/help/protecting-from-sql-injection/