https://devhubby.com/thread/how-do-i-sanitize-sql-without-using-prepared