Javascript Insert New Row Sql Injection