prevent unsafe SQL statement