Added SQL parameter sanitization

fixes #3