Prevent Sql Injection Python