harden api against sql conversion attacks