SQL_avoid_injection

sql avoid injection