Sql Injection Prevention Python