Python String Not In String Sql Injection Example