Simple Sql Injection Check