Python Process Json String Sql Injection