Javascript Sql Injection Prevention