mySQLi connections and SQL injection defense