Python Prevent Sql Injection