SQL injection and prevention of SQL injection