Javascript Insert New Row Sql Injection Attack