Python Unsupported Format Character Sql Injection Attack