https://foojay.io/today/8-best-practices-to-prevent-sql-injection-attacks/