Postgresql Insert From Query Sql Injection Attack