Postgresql Create Function Language Sql Injection Prevention