Postgresql Find Character In String Sql Injection Prevention