Add ImageUtil class and ImageUtilTest class
Add processing to prevent SQL injection