Replace Word In String Sql Injection