End Command Sql Injection Prevention