sql and security work