bug fix of sql injection detection(insert method)