Golang Url Add Query Sql Injection