https://blog.sornram9254.com/how-to-protect-against-sql-injection/