Javascript Insert New Row Sql Injection La