Trying a secure approach to SQL manipulations