SQL injection Prevention -- using sanitize::escape function