http://fullstackprep.dev/articles/webd/sql/sql-injection-prevention