http://www.fullstackprep.dev/Articles/webd/sql/prevent-sql-injection