Python Match Case Substring Method Sql Injection