On Avoiding Common Sql Security Risks