Check If String Array Contains String Sql Injection