Securing parameters against SQL injections