https://mistyinfo.blog/defending-against-sql-injection/